Warning: Permanently added '10.128.1.59' (ECDSA) to the list of known hosts. 2020/04/21 21:59:46 fuzzer started 2020/04/21 21:59:48 dialing manager at 10.128.0.26:42867 2020/04/21 21:59:48 syscalls: 3000 2020/04/21 21:59:48 code coverage: enabled 2020/04/21 21:59:48 comparison tracing: enabled 2020/04/21 21:59:48 extra coverage: enabled 2020/04/21 21:59:48 setuid sandbox: enabled 2020/04/21 21:59:48 namespace sandbox: enabled 2020/04/21 21:59:48 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/21 21:59:48 fault injection: enabled 2020/04/21 21:59:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/21 21:59:48 net packet injection: enabled 2020/04/21 21:59:48 net device setup: enabled 2020/04/21 21:59:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/21 21:59:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/21 21:59:48 USB emulation: /dev/raw-gadget does not exist 22:01:58 executing program 0: syzkaller login: [ 190.517736][ T7209] IPVS: ftp: loaded support on port[0] = 21 22:01:58 executing program 1: [ 190.666794][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 190.771833][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.789102][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.809530][ T7209] device bridge_slave_0 entered promiscuous mode [ 190.830634][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.837746][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.860704][ T7209] device bridge_slave_1 entered promiscuous mode [ 190.905018][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.907581][ T7339] IPVS: ftp: loaded support on port[0] = 21 [ 190.924274][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.987228][ T7209] team0: Port device team_slave_0 added [ 191.023070][ T7209] team0: Port device team_slave_1 added 22:01:58 executing program 2: [ 191.088731][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.097310][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.127889][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.156512][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.165304][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.194927][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.306065][ T7395] IPVS: ftp: loaded support on port[0] = 21 22:01:59 executing program 3: [ 191.395376][ T7209] device hsr_slave_0 entered promiscuous mode [ 191.441730][ T7209] device hsr_slave_1 entered promiscuous mode [ 191.578247][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 191.636255][ T7478] IPVS: ftp: loaded support on port[0] = 21 22:01:59 executing program 4: [ 191.858735][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.867428][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.877830][ T7339] device bridge_slave_0 entered promiscuous mode [ 191.965928][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.974128][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.984539][ T7339] device bridge_slave_1 entered promiscuous mode [ 192.006905][ T7209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.106142][ T7209] netdevsim netdevsim0 netdevsim1: renamed from eth1 22:01:59 executing program 5: [ 192.168293][ T7209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.238335][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.261644][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.274153][ T7209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.340946][ T7395] chnl_net:caif_netlink_parms(): no params data found [ 192.373908][ T7671] IPVS: ftp: loaded support on port[0] = 21 [ 192.434378][ T7339] team0: Port device team_slave_0 added [ 192.444491][ T7339] team0: Port device team_slave_1 added [ 192.476710][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 192.516498][ T7685] IPVS: ftp: loaded support on port[0] = 21 [ 192.566927][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.574385][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.605501][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.622042][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.630629][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.658021][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.677274][ T7395] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.685749][ T7395] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.695146][ T7395] device bridge_slave_0 entered promiscuous mode [ 192.732849][ T7395] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.740632][ T7395] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.748471][ T7395] device bridge_slave_1 entered promiscuous mode [ 192.842994][ T7339] device hsr_slave_0 entered promiscuous mode [ 192.899863][ T7339] device hsr_slave_1 entered promiscuous mode [ 192.939048][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.946689][ T7339] Cannot create hsr debugfs directory [ 193.005272][ T7395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.017533][ T7395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.046014][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.053576][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.062461][ T7478] device bridge_slave_0 entered promiscuous mode [ 193.074932][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.083239][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.092230][ T7478] device bridge_slave_1 entered promiscuous mode [ 193.122849][ T7395] team0: Port device team_slave_0 added [ 193.132384][ T7395] team0: Port device team_slave_1 added [ 193.248594][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.264058][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.271363][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.297575][ T7395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.313827][ T7395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.320884][ T7395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.347102][ T7395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.366340][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.385015][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 193.522426][ T7478] team0: Port device team_slave_0 added [ 193.545876][ T7671] chnl_net:caif_netlink_parms(): no params data found [ 193.592438][ T7478] team0: Port device team_slave_1 added [ 193.663143][ T7395] device hsr_slave_0 entered promiscuous mode [ 193.739253][ T7395] device hsr_slave_1 entered promiscuous mode [ 193.778993][ T7395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.786576][ T7395] Cannot create hsr debugfs directory [ 193.833595][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.840937][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.850758][ T7671] device bridge_slave_0 entered promiscuous mode [ 193.909211][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.917649][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.926085][ T7671] device bridge_slave_1 entered promiscuous mode [ 193.934242][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.941438][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.971182][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.008593][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.042766][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.050262][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.058115][ T7685] device bridge_slave_0 entered promiscuous mode [ 194.067628][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.075646][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.103309][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.126943][ T7671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.142763][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.151342][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.161377][ T7685] device bridge_slave_1 entered promiscuous mode [ 194.190588][ T7671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.215185][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.255385][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.264558][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.302105][ T7685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.332782][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.345302][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.354949][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.362255][ T2693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.370598][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.379827][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.388213][ T2693] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.395462][ T2693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.403300][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.414620][ T7671] team0: Port device team_slave_0 added [ 194.461630][ T7478] device hsr_slave_0 entered promiscuous mode [ 194.499508][ T7478] device hsr_slave_1 entered promiscuous mode [ 194.539290][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.546881][ T7478] Cannot create hsr debugfs directory [ 194.562543][ T7685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.573919][ T7339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.627597][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.637604][ T7671] team0: Port device team_slave_1 added [ 194.672156][ T7339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.724439][ T7339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.817168][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.840368][ T7685] team0: Port device team_slave_0 added [ 194.848680][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.857962][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.870976][ T7339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 194.918142][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.926415][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.953753][ T7671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.968321][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.976593][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.002952][ T7671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.027049][ T7685] team0: Port device team_slave_1 added [ 195.035540][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.043906][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.054871][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.132559][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.141328][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.231548][ T7671] device hsr_slave_0 entered promiscuous mode [ 195.269330][ T7671] device hsr_slave_1 entered promiscuous mode [ 195.328924][ T7671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.336712][ T7671] Cannot create hsr debugfs directory [ 195.366402][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.376241][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.402755][ T7685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.414750][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.424379][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.434231][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.473855][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.482313][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.510072][ T7685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.564132][ T7395] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.630222][ T7395] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.665135][ T7395] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.773123][ T7685] device hsr_slave_0 entered promiscuous mode [ 195.819292][ T7685] device hsr_slave_1 entered promiscuous mode [ 195.859543][ T7685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.867184][ T7685] Cannot create hsr debugfs directory [ 195.889717][ T7395] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.987637][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.998306][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.006619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.143276][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.153330][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.191632][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.223972][ T7478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.275579][ T7478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.369071][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.377360][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.390890][ T7478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.446847][ T7478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.499135][ T7671] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.544284][ T7671] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.600604][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.608553][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.624709][ T7209] device veth0_vlan entered promiscuous mode [ 196.659940][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.666859][ T7671] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.700858][ T7671] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.761499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.773009][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.799598][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.808282][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.819641][ T2794] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.826712][ T2794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.835198][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.844841][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.854108][ T2794] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.861250][ T2794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.882709][ T7209] device veth1_vlan entered promiscuous mode [ 196.905031][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.913916][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.964007][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.975655][ T7685] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.055430][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.065070][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.074772][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.084166][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.093547][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.102835][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.115298][ T7685] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.195683][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.205028][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.214500][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.224363][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 197.234582][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.243732][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.252387][ T7685] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.335712][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.344577][ T7339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.353301][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.362904][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.372479][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.381440][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.392590][ T7685] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.455921][ T7209] device veth0_macvtap entered promiscuous mode [ 197.498373][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.507086][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.516769][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.526198][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.533369][ T2693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.546006][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.557498][ T7209] device veth1_macvtap entered promiscuous mode [ 197.583107][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.591628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.601260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.610546][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.617623][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.637013][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.671712][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.685622][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.696702][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.709452][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.716883][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.729587][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.743265][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.753815][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.776276][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.785178][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.811275][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.821224][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.830181][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.840301][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.961083][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.982400][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.990474][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 197.999508][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.007915][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.016929][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.032507][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.171544][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.181652][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.190053][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 198.200963][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.210667][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.219928][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.231793][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.257933][ T7671] 8021q: adding VLAN 0 to HW filter on device team0 22:02:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="010000002f66696c00fcffffffffffe64b03ae336108000b1634290ad653d488d81b8b58bb8e667fd15c577375e9d6423481739716972ac5876c274e30cf23eca671a6f4c349c680a1e8cc00e0fadb954197d45d99328d4f04ea88ebeb3c8e56fc0942ce5dd3ebddca712c8140eff873164356a6e510465c"], 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 198.284556][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.325771][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.336076][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.347923][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.355119][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.414683][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.427909][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.451216][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.466313][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.477315][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.486818][ T2693] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.494050][ T2693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.503912][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.516158][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.517723][ T8472] ptrace attach of "/root/syz-executor.0"[8469] was attempted by "/root/syz-executor.0"[8472] [ 198.526712][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.541738][ T2693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.550151][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.562899][ T7339] device veth0_vlan entered promiscuous mode [ 198.602739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.611660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.620634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.630165][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.637726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.646496][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.656690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.666175][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.673347][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.682029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.691680][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.715097][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.751440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.764403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.774270][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.783643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.793415][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.802579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.812143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.829588][ T7339] device veth1_vlan entered promiscuous mode [ 198.852424][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.866522][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.876294][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.884682][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.893655][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.903227][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.912422][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.921353][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.929986][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.938879][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.947599][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.957024][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.997913][ T7671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.009908][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.017979][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.028410][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.040905][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.051941][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.081937][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.105250][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.113451][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.130317][ T7685] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.159353][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.167914][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.178113][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.187394][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.199637][ T7339] device veth0_macvtap entered promiscuous mode [ 199.215788][ T7395] device veth0_vlan entered promiscuous mode [ 199.243242][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.255110][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 22:02:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="010000002f66696c00fcffffffffffe64b03ae336108000b1634290ad653d488d81b8b58bb8e667fd15c577375e9d6423481739716972ac5876c274e30cf23eca671a6f4c349c680a1e8cc00e0fadb954197d45d99328d4f04ea88ebeb3c8e56fc0942ce5dd3ebddca712c8140eff873164356a6e510465c"], 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 199.266214][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.310208][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.329126][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.337662][ T2795] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.344813][ T2795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.380863][ T7339] device veth1_macvtap entered promiscuous mode [ 199.405586][ T7395] device veth1_vlan entered promiscuous mode [ 199.456788][ C0] hrtimer: interrupt took 26987 ns [ 199.501229][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.535309][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.545684][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.555242][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.563626][ T8482] ptrace attach of "/root/syz-executor.0"[8481] was attempted by "/root/syz-executor.0"[8482] [ 199.576108][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.584985][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.592132][ T2803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.631399][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.643629][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.654280][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.665748][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.675897][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.686225][ T2795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.704871][ T7478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.722139][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.742995][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.755725][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.767726][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.786118][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 199.801015][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.813822][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.839189][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.847946][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.867920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.882822][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.907604][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 199.918463][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.932465][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.960572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.972831][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.981895][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.991193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.000610][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.009643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.054570][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.069853][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.084583][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.094164][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 22:02:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="010000002f66696c00fcffffffffffe64b03ae336108000b1634290ad653d488d81b8b58bb8e667fd15c577375e9d6423481739716972ac5876c274e30cf23eca671a6f4c349c680a1e8cc00e0fadb954197d45d99328d4f04ea88ebeb3c8e56fc0942ce5dd3ebddca712c8140eff873164356a6e510465c"], 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 200.112331][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.126381][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.151409][ T7395] device veth0_macvtap entered promiscuous mode [ 200.162096][ T7685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.193959][ T7478] device veth0_vlan entered promiscuous mode [ 200.207506][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.218322][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.235893][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.251600][ T7395] device veth1_macvtap entered promiscuous mode [ 200.311274][ T7478] device veth1_vlan entered promiscuous mode [ 200.433946][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.449286][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.468323][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 200.486975][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.510749][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.526849][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.535717][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.545445][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.555304][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.565395][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.575872][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.585879][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.658244][ T7685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.682575][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 22:02:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="010000002f66696c00fcffffffffffe64b03ae336108000b1634290ad653d488d81b8b58bb8e667fd15c577375e9d6423481739716972ac5876c274e30cf23eca671a6f4c349c680a1e8cc00e0fadb954197d45d99328d4f04ea88ebeb3c8e56fc0942ce5dd3ebddca712c8140eff873164356a6e510465c"], 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 200.703014][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.728056][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 200.750570][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.767358][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.786046][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.799433][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.820058][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.849008][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.868736][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.877340][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.975056][ T7478] device veth0_macvtap entered promiscuous mode 22:02:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="010000002f66696c00fcffffffffffe64b03ae336108000b1634290ad653d488d81b8b58bb8e667fd15c577375e9d6423481739716972ac5876c274e30cf23eca671a6f4c349c680a1e8cc00e0fadb954197d45d99328d4f04ea88ebeb3c8e56fc0942ce5dd3ebddca712c8140eff873164356a6e510465c"], 0x78) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) [ 201.056314][ T7478] device veth1_macvtap entered promiscuous mode 22:02:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x4305, @igmp={{0x5, 0x4, 0x3, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) [ 201.133458][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.154137][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.175645][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.185769][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.204482][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.221389][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.247681][ T8517] ptrace attach of "/root/syz-executor.0"[8516] was attempted by "/root/syz-executor.0"[8517] [ 201.268490][ T7671] device veth0_vlan entered promiscuous mode 22:02:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x4305, @igmp={{0x5, 0x4, 0x3, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) 22:02:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 201.437236][ T7671] device veth1_vlan entered promiscuous mode [ 201.470381][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:02:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000200)) [ 201.526272][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.548674][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.564356][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.574602][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 201.587083][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.588024][ T8527] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 201.601287][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.650355][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.672083][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.691829][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.717082][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.736042][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.799507][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.818283][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.837194][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.855195][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.876313][ T7478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 201.898348][ T7478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.920443][ T7478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.951759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.959616][ T8529] kvm [8526]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x4000004c [ 201.963399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.026596][ T7685] device veth0_vlan entered promiscuous mode [ 202.071408][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.084687][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.136615][ T7671] device veth0_macvtap entered promiscuous mode [ 202.191743][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.203860][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.212241][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.222285][ T2803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.232064][ T7685] device veth1_vlan entered promiscuous mode [ 202.242086][ T7671] device veth1_macvtap entered promiscuous mode [ 202.251474][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.260325][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.268375][ T2794] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.366655][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.385823][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.396901][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 22:02:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000004780)=""/127, &(0x7f0000004800)=0x7f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x82, &(0x7f0000001f40)=ANY=[@ANYBLOB="850000006d00000025000000000000009500000000000000afcd48d6494d614d1612ba392176dd2963228e1d69ba7ea94c500dc4ef2fad96ed406f21caf593836d9ea2cfb0e60436e054258c4686b066707de94a4f4d5fc79c987d669f2b1faca0f9d9924be41a9169bdfa716d1c0b153911b8dd7f165789c691de6eee84309e7a23c19a39484809539fca4e0b6ec015a7d55545a34effa077faa55c59e88254f54077f799bf1683537a8ea0244d35b213bda80cc172afd80e361bedd8b8cc57255a5e3d77ac463920e231b7ae0da8616d2b7958f9005d822175ed60ab386d94af98af1da2b59525f8a80d711a66dfedfffe5ab0255f345160ec8343e1494d3a63e57a15cf10453f6c0bb13b81a484ebae04859d928365a7ea3fab8b4b380a00d72bc0010f949c479757306720399379d9271cf555c14d56b51c2208e0d5976a942b846970cfd98b9d4139f132a902e5111f2cc5e46ac1c60a9b10c074bfbcd435561ee504d4511f0e519f0b1c4aaa026d570ecb5e8cddbed65ff76ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d5ef479570c8ad943e392957b4f979ea17117a13201bafe4f0f6ea5a6c957ada0c548552b571bed5647223e78a99625bbca4fd9ff0304ec13eaa66580ae7b813071cbb17d9f37282462f03de147c0d497c61433c6cce2fb59ee4142c35601eef97ee611be8c97f4151ffdf6f7820549cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177dab6c4604b7a492ecec37e83efceefd7ca2fa36ba669b50e59f85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc6825a3a3f8ffffff23175e2ce8b03bf3e3c033e54e4ba9b05292bfdb26f4cd7e166cc384b2845c537b397aaea0eac8e6d80249203f8e070ff941dd7067cb53879c3dbfa852e8fa7aa3d926c6d8aa1f82c76bc59352e82be8e52dce03000000061601fc3b393f75eb23d5c6b4c0ac8ef660a37311e5d311a20213c8ac066c920e2d8c1c88738eed6ac7b8d66fcc4b7454316338d928b8fff2739e811784d6873207c10ac73e264a6e65bf33020fc466df9ed2764ee2d076e5b68fa1642ebf17caf01bce8e02c31a13ceb7fed854b0625741964fdb2737505f8f584e4c14bd36b9e0608843fc32c6642091765068554ac92b42e467f69b499ecef34d2e6195365822b5567b3dd5f5c3424e7b6faea95c0109873eb52fb8e5a604c8f200404a4dd79ce8c28f56dd583c3ece2ba8c761d2ca6213678ca16f6b579cde0c1a0ab95f99620e84c0487e6565c04de458761768de308ff95a7189a7731378f0b171f99240f8167693329744d0e41639dca4859753d3982ae3f7efa7d03ca250c4b9c8e03f91b196e459d8e250afe4f79f353e59b1021d2ff3b353ebb07c8bbf2135ee986ac58c02df0000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000}, 0x10, 0x0, r7}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) syz_open_pts(r2, 0x10200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) recvmmsg(r5, &(0x7f0000004600)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000440)=""/44, 0x2c}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)=""/68, 0x44}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/229, 0xe5}, 0x7}, {{&(0x7f0000001740)=@ipx, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000017c0)=""/80, 0x50}, {&(0x7f0000001840)=""/63, 0x3f}, {&(0x7f0000001880)=""/173, 0xad}, {&(0x7f0000001940)=""/65, 0x41}, {&(0x7f00000019c0)=""/247, 0xf7}], 0x5, &(0x7f0000001b40)=""/92, 0x5c}, 0xffff8001}, {{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004380)=[{&(0x7f0000001c40)=""/89, 0x59}, {&(0x7f0000001cc0)=""/49, 0x31}, {&(0x7f0000001d00)=""/145, 0x91}, {&(0x7f0000001dc0)=""/173, 0xad}, {&(0x7f0000001e80)=""/101, 0x65}], 0x5, &(0x7f0000001f00)=""/42, 0x2a}, 0x1}, {{&(0x7f0000004400)=@hci, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004480)=""/158, 0x9e}, {&(0x7f0000004540)=""/37, 0x25}, {&(0x7f0000004580)=""/8, 0x8}], 0x3}, 0x3}], 0x5, 0x2001, &(0x7f0000004740)={0x77359400}) [ 202.414310][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.445521][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.478492][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.490266][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.501780][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.520471][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.546685][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.561246][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.571809][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.584699][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.609465][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.625671][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.636770][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.647232][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.658239][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.668975][ T7671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 202.679992][ T7671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.692044][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.705859][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.717297][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.727102][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.737688][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.752686][ T7685] device veth0_macvtap entered promiscuous mode [ 202.778816][ T7685] device veth1_macvtap entered promiscuous mode [ 202.835796][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.846420][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.857330][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.868466][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.879499][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.891043][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.902082][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.913282][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.924656][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 202.935660][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.947191][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.995612][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.004377][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.017639][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.031548][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.048436][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.060100][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.072770][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.084147][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.095567][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.114817][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.126242][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.137141][ T7685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 203.150123][ T7685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.162236][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.207548][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.222412][ T2693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:02:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x5, 0x0, [{}, {}, {}, {}, {}]}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x8ef) 22:02:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x4305, @igmp={{0x5, 0x4, 0x3, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) 22:02:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x4b63, 0x0) 22:02:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4}) 22:02:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="0000ba0000d70800"], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000247904050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900d87c22c0d5ca0100686673630000deff080002000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}}, 0x0) 22:02:11 executing program 4: perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0xb8, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x7200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1f}, 0xa102, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffff27de, 0x5a6690ad8bcd0478, 0x0, 0x207}, 0x0, 0x1000000000003, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msgget(0x1, 0x2a0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0x100000000, 0x1000000}) 22:02:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x2d, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08006580", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000060) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="140000001e0035205ca0f639a003412206d21b80", 0x14}], 0x1}, 0x0) [ 203.621654][ T8575] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 22:02:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private=0xa010102}, 0x10) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) r5 = dup3(r4, r0, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0xb8, "3329eaece5bbd92570af60dc6fef37a1c466607b0cba3cb3958741a23d8ce51f1a17ffada96662d85ca7a1af60c8f38780959e45f2d623094d8a7d5e046b063c50c01d99860294186bdbc88bd6e8a3818888e08a468c65b96cfaf74f9fbcfa6d3521917c1e6f8aebe8f34d4aa80d8aff7ce9312a81293caf55249db8cafaeb57083ee8ce769938865b3e0d68515d1ae9a53dda99e9047da4ef0a3a6c378a373e06a8b97c895d0ed0b88da5c7d8e3cc019120ac2694d497a9"}, &(0x7f0000000080)=0xdc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040)=0x100060, 0xa808) 22:02:11 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20000, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f0000000040)=0x9) sendmmsg$inet(r0, &(0x7f0000007480)=[{{&(0x7f0000000bc0)={0x2, 0x0, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 22:02:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}, 0x1, 0x3e1e000000000000}, 0x0) 22:02:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) close(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000080)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(r3, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001}, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) 22:02:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x2d, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="08006580", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000060) sendmsg$kcm(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="140000001e0035205ca0f639a003412206d21b80", 0x14}], 0x1}, 0x0) 22:02:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r0, r3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:11 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r8, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000010400000000fedbdf2500000000", @ANYRES64=r8, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x7}}, 0x0) 22:02:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x4}}]}, 0x34}, 0x1, 0x3e1e000000000000}, 0x0) 22:02:11 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @private=0xa010102}, 0x10) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x10005, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) r5 = dup3(r4, r0, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0xb8, "3329eaece5bbd92570af60dc6fef37a1c466607b0cba3cb3958741a23d8ce51f1a17ffada96662d85ca7a1af60c8f38780959e45f2d623094d8a7d5e046b063c50c01d99860294186bdbc88bd6e8a3818888e08a468c65b96cfaf74f9fbcfa6d3521917c1e6f8aebe8f34d4aa80d8aff7ce9312a81293caf55249db8cafaeb57083ee8ce769938865b3e0d68515d1ae9a53dda99e9047da4ef0a3a6c378a373e06a8b97c895d0ed0b88da5c7d8e3cc019120ac2694d497a9"}, &(0x7f0000000080)=0xdc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000040)=0x100060, 0xa808) 22:02:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000340)=[{@fixed}, {@none}, {@none}, {@fixed}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) ioctl$SNDRV_PCM_IOCTL_RESET(r7, 0x4141, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3d090000100077dd1f43000800000061cf0000000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070008000000"], 0x3c}}, 0x0) 22:02:13 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/771], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103004000638477fbac14143fe0004301c699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x10, &(0x7f00000003c0)={&(0x7f0000000a00)=""/136, 0x88}}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9b5) openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) fcntl$setstatus(r2, 0x4, 0x42400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) 22:02:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r0, r3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:13 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 22:02:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x200, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0xfffffffffffffd1e}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000140)={0x0, 0x2d, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r7, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, r9, 0x1, 0x0, 0x0, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xa4, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc6c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1c}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44840}, 0x200048c1) write$cgroup_int(r1, &(0x7f0000000200), 0xe00) 22:02:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r0, r3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:13 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r0, r3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 22:02:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 22:02:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x7, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000006400300bfa300000000000014020000de1ad5017a03f0fff8ffffff79a4f0ff00000000b7060000ffffff212e640500000000007502faff0700000a0404000001007d60b7030000001000006a0a00fe000000008500000026000000b70000000000004095000000000000001da5ad3548ebb63d18db6a1c7272faa9b1ce9f821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c1dc908350000005ec1956bd8660bf36628dff1a15750ab7e780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8eb040c50287c37a7f4182dc2333b08c6e497687e10a4daea5cac0ceafdb9a2eeb02a1f5104d16ddb64963d84d91814cd5817e0b8f6fed786b781ab1faa35d391516e43c42a5e23ea6253d5df768d0cb30a5bb8c13d5b47975b4b13b9f35e4f41a62df9b4c03e53466dfc6b76c12aadd308fc0b0212c8d944f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75bb32935f542127a8f8438feecbb1c757f7169f006f3f5c95177fbd0b14b3625962905ef911785c8cc0c4a11cb136d8a6084d676d8ef8aa6ecc2d32e3f4ee367e0a769c0a606636c9f4a4413c098f4fcc9661c80c373b0ef04d55b846b09c7f97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c4364333af9a9d91c3e41a8ec37a43f85ad8f32b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100000000000000000035e55156cb221e517bbdf212f6bbf8b4a398ae15b31b0c148473b1197916d165b40f4a9001fa45a8463ec0af7f983039be5bb336dfa526026bea0d8985828e9e9448c20180167cacd32b610c97fd3a5233fd666ff45c74c32681e097c12da11969ea515ca6452f357b6341906068ad9d1d84d06b916e7c7534c2e7213fef9afffa"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 22:02:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 22:02:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) dup2(r4, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) 22:02:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 22:02:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) 22:02:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) 22:02:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pidfd_getfd(r0, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) dup2(r4, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:15 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) dup2(r4, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3e21}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000010) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d0}) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:17 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:17 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f00000001c0)={r3, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xffffffff}}]}]}]}, 0x3c}}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, 0x0) ioctl$TIOCNOTTY(r5, 0x5422) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x2d, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xf}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:scsi_generic_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x24008819) 22:02:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:18 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 210.673856][ T8841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.716109][ T8841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 22:02:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x2}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r1, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:18 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$P9_RWALK(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="ea004000000000008741c45482427a7b20953e6c"], 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30480}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) write$P9_RSYMLINK(r4, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x4}}, 0x14) read(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:18 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r3, 0x3}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) write$P9_RWALK(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="ea004000000000008741c45482427a7b20953e6c"], 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x1ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30480}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffffff) write$P9_RSYMLINK(r4, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x80, 0x4}}, 0x14) read(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:19 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:19 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:19 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:19 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}) 22:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 4: 22:02:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 22:02:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 22:02:20 executing program 4: 22:02:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) 22:02:20 executing program 4: 22:02:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 4: 22:02:20 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)) 22:02:20 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:20 executing program 4: 22:02:20 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 1: 22:02:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, 0x0) 22:02:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:21 executing program 4: 22:02:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 1: 22:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:21 executing program 4: 22:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:21 executing program 1: 22:02:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 4: 22:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 1: 22:02:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 4: 22:02:21 executing program 1: 22:02:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:21 executing program 4: 22:02:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:21 executing program 1: 22:02:22 executing program 1: 22:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r2, 0x61}], 0x1, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0, 0x0) 22:02:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "0000b4f27cb8ac20f344ab386329508c00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x12) 22:02:22 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000480)={0x9, 0x37, 0x60000000, 0x5, 0x8, 0xc000, 0x200, 0x3, 0x200, 0xfa, 0x9, 0x1, 0x7fff, 0x7fff, &(0x7f0000000440)=""/57, 0x3, 0x9eee, 0x6}) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x2) 22:02:22 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xd31, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 22:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0x1a) 22:02:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0102000000000087ec1bc800000004000a000800040000000000"], 0x20}}, 0x0) 22:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 22:02:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 22:02:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb8}}, 0x0) 22:02:24 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:24 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x4571, 0x4) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:02:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="acb1c31f9a7bc0e286d6a0ee1bb91bee775820f8f2f9590672fa7e65f93ae6274406eb05d72aa7237764c5a8c6931615dacc2b36dff9096cbd447fb26bcac392212752de6b9b67ab24289588ec2eb8b90a"], 0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x541b, 0x0) 22:02:24 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) recvfrom$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)=@abs, 0x6e) 22:02:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvfrom$unix(r1, 0x0, 0x0, 0x7f454c46, &(0x7f0000000200)=@abs, 0x400000) 22:02:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r0, 0x0, 0xa) 22:02:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x40840, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local={0xac, 0x5c, 0x14, 0x6a}, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@local}, {@dev}, {@multicast1}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@dev}]}]}}}}}}}, 0x0) 22:02:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r0, 0x0, 0xa) 22:02:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={0x0, 0x3}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 4: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 22:02:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="acb1c31f9a7bc0e286d6a0ee1bb91bee775820f8f2f9590672fa7e65f93ae6274406eb05d72aa7237764c5a8c6931615dacc2b36dff9096cbd447fb26bcac392212752de6b9b67ab24289588ec2eb8b90a3d5abe13"], 0x55) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x3) 22:02:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x3f, 0x1d5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x5c1) 22:02:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) [ 218.285159][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x22, &(0x7f0000000100)={@loopback, @local}, 0x3) 22:02:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "0000b4f27cb8ac20f344ab386329508c00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "87afa9d01bbd7bf9"}) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)) [ 218.551244][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000000)=0xd) 22:02:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 218.793436][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) recvfrom$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)=@abs, 0x400000) 22:02:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:26 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 22:02:26 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x800) 22:02:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 219.145406][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x70a, 0x6, 0x1, 0x2}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="acb1c31f9a7bc0e286d6a0ee1bb91bee775820f8f2f9590672fa7e65f93ae6274406eb05d72aa7237764c5a8c6931615dacc2b36dff9096cbd447fb26bcac392212752de6b9b67ab24289588ec2eb8b90a"], 0x51) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x541b, &(0x7f0000000000)) [ 219.394384][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 219.582935][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x7ff}, 0x10) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0102000000000087ec1bc800000004000a000500040000000000"], 0x20}}, 0x0) 22:02:27 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:27 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) [ 220.192093][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) 22:02:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x19, &(0x7f0000000100)={@loopback, @local}, 0x3) 22:02:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 220.363848][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 220.421539][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @loopback, @mcast2, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x11}) [ 220.502056][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="acb1c31f9a7bc0e286d6a0ee1bb91bee775820f8f2f9590672fa7e65f93ae6274406eb05d72aa7237764c5a8c6931615dacc2b36dff9096cbd447fb26bcac392212752de6b9b67ab24289588ec2eb8b90a3d5abe13"], 0x55) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000000)=0x1a) 22:02:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) recvfrom$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)=@abs, 0x73a000) 22:02:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @loopback, @mcast2, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x11}) 22:02:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x0) 22:02:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @loopback, @mcast2, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x11}) 22:02:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x40400) 22:02:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @loopback, @mcast2, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags=0x11}) 22:02:28 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:28 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:28 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 22:02:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773", 0x3e}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 22:02:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 221.458604][ T9395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:02:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 221.653194][ T27] audit: type=1804 audit(1587506549.353:2): pid=9406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir355943519/syzkaller.5yaPBc/65/file0/file0" dev="loop5" ino=23 res=1 22:02:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 22:02:29 executing program 1: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 22:02:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 222.005264][ T9425] overlayfs: workdir and upperdir must be separate subtrees 22:02:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 222.067231][ T9432] overlayfs: workdir and upperdir must be separate subtrees 22:02:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 22:02:29 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:29 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:29 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='binfmt_misc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/28, 0x1c) 22:02:29 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100"/86], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b", 0x22}], 0x2, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 22:02:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') creat(&(0x7f0000000300)='./file0\x00', 0x0) 22:02:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:30 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:30 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 223.296638][ T9505] __nla_validate_parse: 35 callbacks suppressed [ 223.296648][ T9505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.424065][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:31 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:31 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:31 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 224.203225][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.217775][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r0 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r0 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 224.635414][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.663895][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r0 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 224.861499][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:32 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 224.976874][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.073303][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.100802][ T9587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:32 executing program 4: r0 = memfd_create(0x0, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 4: r0 = memfd_create(0x0, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 4: r0 = memfd_create(0x0, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:33 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, 0x0, 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:34 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:34 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, 0x0, 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, 0x0, 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200), 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200), 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200), 0x0, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{0x0}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:35 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a00020000000000000000001400"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:35 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{0x0}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:35 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 228.360593][ T9784] __nla_validate_parse: 17 callbacks suppressed [ 228.360603][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{0x0}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 228.405556][ T9785] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:36 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 228.483590][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.610276][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 228.650559][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:36 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 228.791073][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 228.931853][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 229.018847][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:36 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:36 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 229.154143][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:36 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) [ 229.298210][ T9835] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 22:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:37 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:37 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:37 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(0x0, 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(0x0, 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2d00330000000000000060bc6f0900000000000000000000000000000000000000aaff02000000012f0000000000000004203a580000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000022e000000000000000000000800655800000000000000000000000000008d7d988a96c5d74659c9f39f8af27ae0f592ad4cb42224dc0f40fbba51c0ddc7b5496b777f7c394c4b84f37776250e874711cd6993ddf5f827c35b7c93ad7782db90afb7b809ac1912e4ea2f2bf3ef93b3e99377124d18302104371e0a152908dad7018b0ed2f099b5b520a65433a04eb5d596d48514bf452ccf8c3d58754cf2c0a48d752006712f6edbe476e24be83c7889e2c3ec0e954ee2584f0fc66309bf429c65da859fe0418ae04189148c8540a1fc13142c941b556afab05d4c4c998692852f62f30d36e5c81a2d2e2baa842dd8f5676b428ffcf3578ef7db0042b3abe73426b0d32b51ff01000000000000211c4d406c0b2a0bbc6f5a35e4decad6c5498ba7bdd5e690e8e3087838a2391f0b9b60a22761b29a694998b2af5fbcbb9f037ff21c023cd6e9fa823292670e7fa42aa24dfa016bfce15515ed679c35c96255a024d51e45583aa58be10cf67980dd9c29bc115e7c2d0876c26b383e04c18b29f1f31ba1de23d2ae2a5df14bb7892d4c4c19395109bf369ca1a0be3f17215036dbc0edcf4bff6a1ad0a60cb0a13a2452375dfa3aaa63579a192d6db8477ee1d188375e08976d6069fae7049c1966c13eaceb72a579f502bf861ca06f5cb5bfc3c9fe87157e5ab987b98710bf0ab846e6aa4b49990bd65a4ccb4cf8f0026bc426e4b1c2864be0fe4f90caf613ebd5f55a7adb5aeddeb3d0f900dfc9116dfba0eccd7cdeaf6785b6e8b9d4a83871ccc3583a91c8930442533e294edb36aa64e310add062"], 0xfdef) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(0x0, 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:38 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:38 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:39 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff010000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:39 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:39 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:40 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:40 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:40 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 233.423027][T10088] __nla_validate_parse: 34 callbacks suppressed [ 233.423038][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:41 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:41 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:41 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 233.942068][T10111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.966128][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 234.107788][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 234.170894][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:42 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 234.296993][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:42 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 234.901537][T10162] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.910085][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:42 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/134, 0xfdef}], 0x2, 0x0) 22:02:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:42 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 235.184626][T10178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 22:02:42 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 235.250586][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 22:02:43 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0) 22:02:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:43 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, 0x0, 0x0, 0x0) 22:02:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd000000010000001400"/62, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:43 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:44 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 22:02:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 22:02:44 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:44 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) 22:02:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd00000001000000140000000000000000000023", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:45 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0) 22:02:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2d00330000000000000060bc6f0900000000000000000000000000000000000000aaff02000000012f0000000000000004203a580000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000022e000000000000000000000800655800000000000000000000000000008d7d988a96c5d74659c9f39f8af27ae0f592ad4cb42224dc0f40fbba51c0ddc7b5496b777f7c394c4b84f37776250e874711cd6993ddf5f827c35b7c93ad7782db90afb7b809ac1912e4ea2f2bf3ef93b3e99377124d18302104371e0a152908dad7018b0ed2f099b5b520a65433a04eb5d596d48514bf452ccf8c3d58754cf2c0a48d752006712f6edbe476e24be83c7889e2c3ec0e954ee2584f0fc66309bf429c65da859fe0418ae04189148c8540a1fc13142c941b556afab05d4c4c998692852f62f30d36e5c81a2d2e2baa842dd8f5676b428ffcf3578ef7db0042b3abe73426b0d32b51ff01000000000000211c4d406c0b2a0bbc6f5a35e4decad6c5498ba7bdd5e690e8e3087838a2391f0b9b60a22761b29a694998b2af5fbcbb9f037ff21c023cd6e9fa823292670e7fa42aa24dfa016bfce15515ed679c35c96255a024d51e45583aa58be10cf67980dd9c29bc115e7c2d0876c26b383e04c18b29f1f31ba1de23d2ae2a5df14bb7892d4c4c19395109bf369ca1a0be3f17215036dbc0edcf4bff6a1ad0a60cb0a13a2452375dfa3aaa63579a192d6db8477ee1d188375e08976d6069fae7049c1966c13eaceb72a579f502bf861ca06f5cb5bfc3c9fe87157e5ab987b98710bf0ab846e6aa4b49990bd65a4ccb4cf8f0026bc426e4b1c2864be0fe4f90caf613ebd5f55a7adb5aeddeb3d0f900dfc9116dfba0eccd7cdeaf6785b6e8b9d4a83871ccc3583a91c8930442533e294edb36aa64e310add062"], 0xfdef) 22:02:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0) 22:02:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0) 22:02:45 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0) 22:02:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0) 22:02:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 4: r0 = memfd_create(&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xab\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn s\xc2Z\x04\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86/\x9f\x8f\xc0)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xff\a9\xad /\xc9\xa5\x8eTK\xca:\x92\xd3\x1d\xe6\x16J\xd7\x14\x97w\xadL\xa4\xf6\xa71\xd6M', 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r1 = open(&(0x7f0000000300)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}], 0x1, 0x0) 22:02:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @random="a0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local={0xac, 0x5c, 0x14, 0x6a}}}}}}}, 0x0) 22:02:46 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:46 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:46 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 22:02:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:47 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001840)}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote, @loopback, @mcast2}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 22:02:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:47 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x4042, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x47fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) 22:02:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 239.932503][ T27] audit: type=1800 audit(1587506567.636:3): pid=10415 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16050 res=0 [ 239.993588][ T27] audit: type=1804 audit(1587506567.666:4): pid=10415 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 [ 240.024563][ T27] audit: type=1804 audit(1587506567.726:5): pid=10422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 22:02:47 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 240.117521][ T27] audit: type=1804 audit(1587506567.826:6): pid=10428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 22:02:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:48 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) 22:02:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 240.775022][ T27] audit: type=1804 audit(1587506568.476:7): pid=10422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 22:02:48 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x12, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x0, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) [ 240.829440][ T27] audit: type=1804 audit(1587506568.486:8): pid=10431 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 22:02:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 240.944319][ T27] audit: type=1804 audit(1587506568.486:9): pid=10422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 [ 241.054400][T10463] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/6' not defined. [ 241.074335][ T27] audit: type=1804 audit(1587506568.566:10): pid=10422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/98/file0" dev="sda1" ino=16050 res=1 [ 241.126799][T10466] FAT-fs (loop5): bogus number of reserved sectors [ 241.142019][T10466] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:49 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x4042, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x47fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r0, 0x0, 0xffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) 22:02:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 241.331642][ T27] audit: type=1800 audit(1587506569.036:11): pid=10475 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16072 res=0 [ 241.384642][ T27] audit: type=1804 audit(1587506569.066:12): pid=10475 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir935688421/syzkaller.8XtZEQ/99/file0" dev="sda1" ino=16072 res=1 22:02:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="2d00330000000000000060bc6f0900000000000000000000000000000000000000aaff02000000012f0000000000000004203a580000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000022e000000000000000000000800655800000000000000000000000000008d7d988a96c5d74659c9f39f8af27ae0f592ad4cb42224dc0f40fbba51c0ddc7b5496b777f7c394c4b84f37776250e874711cd6993ddf5f827c35b7c93ad7782db90afb7b809ac1912e4ea2f2bf3ef93b3e99377124d18302104371e0a152908dad7018b0ed2f099b5b520a65433a04eb5d596d48514bf452ccf8c3d58754cf2c0a48d752006712f6edbe476e24be83c7889e2c3ec0e954ee2584f0fc66309bf429c65da859fe0418ae04189148c8540a1fc13142c941b556afab05d4c4c998692852f62f30d36e5c81a2d2e2baa842dd8f5676b428ffcf3578ef7db0042b3abe73426b0d32b51ff01000000000000211c4d406c0b2a0bbc6f5a35e4decad6c5498ba7bdd5e690e8e3087838a2391f0b9b60a22761b29a694998b2af5fbcbb9f037ff21c023cd6e9fa823292670e7fa42aa24dfa016bfce15515ed679c35c96255a024d51e45583aa58be10cf67980dd9c29bc115e7c2d0876c26b383e04c18b29f1f31ba1de23d2ae2a5df14bb7892d4c4c19395109bf369ca1a0be3f17215036dbc0edcf4bff6a1ad0a60cb0a13a2452375dfa3aaa63579a192d6db8477ee1d188375e08976d6069fae7049c1966c13eaceb72a579f502bf861ca06f5cb5bfc3c9fe87157e5ab987b98710bf0ab846e6aa4b49990bd65a4ccb4cf8f0026bc426e4b1c2864be0fe4f90caf613ebd5f55a7adb5aeddeb3d0f900dfc9116dfba0eccd7cdeaf6785b6e8b9d4a83871ccc3583a91c8930442533e294edb36aa64e310add062"], 0xfdef) 22:02:49 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 22:02:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 241.575070][T10478] FAT-fs (loop5): bogus number of reserved sectors [ 241.625899][T10478] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:49 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x12, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x0, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:49 executing program 4: r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000100)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8000000, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x50, 0x7ff, 0x0, 0x5, 0x5, 0x6, 0x3f, 0x7b3c}, 0x0) r5 = getpid() perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b}, r5, 0x0, 0xffffffffffffffff, 0x3) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 241.955760][T10507] FAT-fs (loop5): bogus number of reserved sectors [ 241.970489][T10510] NFS: Device name not specified [ 242.008744][T10507] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 22:02:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:49 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000001c0)="85525f6b0196a105342ca2c910a031", 0xf}, {&(0x7f0000000240)="f1348694b932cfbbab283c8be2797df57e39d64989c3ed83d71c62f61bd032ff68bb18ff40a18a99d2ac03bb6cdc09e8ce6ad932837d6e0612e0b53cb78c0bd7d52a40d252ced3da01379a62632d2267e555bac364a3df956f9850e36c87cbba70bd66da0f2356d01d32985012495b59a7e4e4cdc7313cb7b12890e00365d574c6804c34f31598df58f49d03845ca84d40b0b46e77f7b64e908d25f5eee7e8235adcf69adf030b73ca8e9d1c959b3994383824978102647ef1d1b0f16b762f26be7cdeb4325f3a383ee43f7c363dc0da55241ec1d97b", 0xd6}, {&(0x7f0000000340)="77a841e4d9aa8a158e7785f3ddbbc2a8821606282b01260d16a74edb09dbe0d350cb95ed7bdc44c46fd75a40c9bd3a9672ac61e390de5b1158ed900f471501da829d0a9e7c89d6133fb8db", 0x4b}, {&(0x7f00000003c0)="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", 0x464}], 0x4, &(0x7f0000001440)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, [], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)="e6", 0x1}], 0x1}}], 0x4000393, 0x2004c840) 22:02:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xfdef) [ 242.211503][T10523] FAT-fs (loop5): bogus number of reserved sectors [ 242.242335][T10523] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x3c0a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0) 22:02:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:50 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x12, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x0, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 242.555278][T10544] FAT-fs (loop5): bogus number of reserved sectors [ 242.561840][T10544] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:50 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) 22:02:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:50 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 22:02:50 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 22:02:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 22:02:51 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:51 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCCBRK(r0, 0x5428) [ 243.483117][T10584] FAT-fs (loop5): bogus number of reserved sectors [ 243.522736][T10584] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:51 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:51 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 243.824434][T10611] FAT-fs (loop5): bogus number of reserved sectors [ 243.837189][T10611] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 22:02:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) 22:02:51 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:51 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe0, 0x0) [ 244.251350][T10630] FAT-fs (loop5): bogus number of reserved sectors [ 244.287735][T10630] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:52 executing program 2: r0 = gettid() prlimit64(r0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000100)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8000000, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x50, 0x7ff, 0x0, 0x5, 0x5, 0x6, 0x3f, 0x7b3c}, 0x0) r5 = getpid() perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b}, r5, 0x0, 0xffffffffffffffff, 0x3) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 22:02:52 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:52 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) [ 244.511833][T10655] NFS: Device name not specified [ 244.628521][T10662] FAT-fs (loop5): bogus number of reserved sectors [ 244.696097][T10662] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:52 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, 0x0, 0x0) 22:02:52 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) 22:02:52 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r0, 0x5501) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 22:02:52 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 22:02:52 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) [ 245.193210][T10684] input: syz1 as /devices/virtual/input/input5 [ 245.215713][T10689] FAT-fs (loop5): bogus number of reserved sectors [ 245.222644][T10689] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 245.291105][T10704] input: syz1 as /devices/virtual/input/input6 22:02:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:53 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) [ 245.489825][T10717] FAT-fs (loop5): bogus number of reserved sectors [ 245.507986][T10717] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100005020000000000000012ff01000000000000000000000000000100000000080000000000f7bd0000000100000014000000000000000000002300", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000002b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000029bd7000000000000a000200000000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 22:02:53 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 22:02:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x0) 22:02:53 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) 22:02:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000004c0)="390000001300090468fe0700000000000000ff3f04000000480100010000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 246.111895][T10741] FAT-fs (loop5): bogus number of reserved sectors [ 246.126227][T10741] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:53 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:54 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) [ 246.488840][T10763] FAT-fs (loop5): bogus number of reserved sectors [ 246.553183][T10763] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:54 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:54 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], []]}, 0x918) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) [ 246.705085][T10755] __nla_validate_parse: 8 callbacks suppressed [ 246.705094][T10755] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.736699][T10755] device gretap0 entered promiscuous mode 22:02:54 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:54 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) [ 246.934322][T10781] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/6' not defined. 22:02:54 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x0) 22:02:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:54 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) [ 247.154403][T10793] FAT-fs (loop5): bogus number of reserved sectors [ 247.169296][T10793] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:55 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], []]}, 0x918) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) [ 247.524803][T10809] FAT-fs (loop5): bogus number of reserved sectors [ 247.547738][T10809] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:55 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:55 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:55 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:55 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:55 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[], 0x0) 22:02:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:55 executing program 0: ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:55 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:55 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], []]}, 0x918) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) [ 248.287810][T10846] FAT-fs (loop5): bogus number of reserved sectors [ 248.319996][T10846] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:56 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 22:02:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:56 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) [ 248.606643][T10873] FAT-fs (loop5): bogus number of reserved sectors [ 248.613397][T10873] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:56 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:56 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) 22:02:56 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], []]}, 0x918) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:56 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) 22:02:56 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "be32cc00000000000000000000000000f200"}) [ 249.234766][T10897] FAT-fs (loop5): bogus number of reserved sectors [ 249.252835][T10897] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:57 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 22:02:57 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) 22:02:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) [ 249.629186][T10918] FAT-fs (loop5): invalid media value (0x00) 22:02:57 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) 22:02:57 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) 22:02:57 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) [ 249.761180][T10918] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) 22:02:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 22:02:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:58 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) 22:02:58 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 250.397166][T10945] FAT-fs (loop5): invalid media value (0x00) [ 250.416924][T10945] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:58 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:58 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000140)='veth0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) write$binfmt_elf64(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xff, 0xa9, 0x2, 0x0, 0x2, 0x6, 0x9, 0x84, 0x40, 0x1ba, 0x5, 0x2, 0x38, 0x2, 0x4, 0x8, 0x101}, [{0x60000000, 0x2, 0x2c03, 0x81, 0x3, 0x8000, 0xfffffffffffffff8, 0x4}], "f8cf5b8ac9f7be1617e0c20cc3d31200395cdd43795a1daccacffada0098dbb7ac0df4ed5f5a415c2199a19090f79e88fefc2d755baec0a0766bef29055a99ef0a05e2fc8d3ead0deb8518b54e8de365ae2a64f617afe19da1aa9fd0787494d7a848200d745c83c8359eac42c6f1ce80bedf4ef02c6307af9747663364f0d5a5614b5e1f307de72e4c4b12a711dd3625ecc0eeee7dece5760a7a66c9e242b512", [[], [], [], [], [], [], [], [], [], []]}, 0xb18) socket(0x22, 0x80000, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 22:02:58 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) [ 250.813012][T10976] FAT-fs (loop5): invalid media value (0x00) [ 250.819596][T10976] FAT-fs (loop5): Can't find a valid FAT filesystem [ 250.889138][T10981] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/6' not defined. 22:02:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:58 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0), 0x8, 0x0) [ 251.185770][T10989] FAT-fs (loop5): invalid media value (0x00) [ 251.192193][T10989] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:59 executing program 2: 22:02:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1) 22:02:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:59 executing program 2: 22:02:59 executing program 0: 22:02:59 executing program 2: 22:02:59 executing program 0: 22:02:59 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) [ 251.621190][T11007] FAT-fs (loop5): invalid media value (0x00) 22:02:59 executing program 0: [ 251.671854][T11007] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:59 executing program 2: 22:02:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') [ 251.934035][T11023] FAT-fs (loop5): invalid media value (0x00) [ 251.940183][T11023] FAT-fs (loop5): Can't find a valid FAT filesystem 22:02:59 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0), 0x8, 0x0) 22:02:59 executing program 0: 22:02:59 executing program 2: 22:02:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:02:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:02:59 executing program 0: 22:03:00 executing program 2: [ 252.209346][T11034] FAT-fs (loop5): invalid media value (0x00) [ 252.246700][T11034] FAT-fs (loop5): Can't find a valid FAT filesystem 22:03:00 executing program 2: 22:03:00 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 22:03:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:00 executing program 0: 22:03:00 executing program 2: [ 252.700614][T11056] FAT-fs (loop5): invalid media value (0x00) [ 252.717354][T11056] FAT-fs (loop5): Can't find a valid FAT filesystem 22:03:00 executing program 4: msgrcv(0x0, 0x0, 0x16, 0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0), 0x8, 0x0) 22:03:00 executing program 0: 22:03:00 executing program 2: 22:03:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="2d00330000000000000060bc6f0900000000000000000000000000000000000000aaff02000000012f0000000000000004203a580000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000022e000000000000000000000800655800000000000000000000000000008d7d988a96c5d74659c9f39f8af27ae0f592ad4cb42224dc0f40fbba51c0ddc7b5496b777f7c394c4b84f37776250e874711cd6993ddf5f827c35b7c93ad7782db90afb7b809ac1912e4ea2f2bf3ef93b3e99377124d18302104371e0a152908dad7018b0ed2f099b5b520a65433a04eb5d596d48514bf452ccf8c3d58754cf2c0a48d752006712f6edbe476e24be83c7889e2c3ec0e954ee2584f0fc66309bf429c65da859fe0418ae04189148c8540a1fc13142c941b556afab05d4c4c998692852f62f30d36e5c81a2d2e2baa842dd8f567"], 0x1) 22:03:00 executing program 0: 22:03:00 executing program 2: [ 253.184291][T11074] FAT-fs (loop5): invalid media value (0x00) [ 253.210631][T11074] FAT-fs (loop5): Can't find a valid FAT filesystem 22:03:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:01 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 22:03:01 executing program 0: 22:03:01 executing program 2: 22:03:01 executing program 0: 22:03:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:01 executing program 2: 22:03:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:01 executing program 0: 22:03:01 executing program 4: 22:03:01 executing program 0: 22:03:01 executing program 2: 22:03:01 executing program 2: 22:03:02 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 22:03:02 executing program 0: 22:03:02 executing program 4: 22:03:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:02 executing program 2: 22:03:02 executing program 4: 22:03:02 executing program 0: 22:03:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:02 executing program 4: 22:03:02 executing program 2: 22:03:02 executing program 4: 22:03:03 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0), 0x8, 0x0) 22:03:03 executing program 0: 22:03:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:03 executing program 4: 22:03:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:03 executing program 2: 22:03:03 executing program 0: 22:03:03 executing program 4: 22:03:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:03 executing program 0: 22:03:03 executing program 4: 22:03:03 executing program 2: 22:03:04 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0), 0x8, 0x0) 22:03:04 executing program 2: 22:03:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:04 executing program 4: 22:03:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:04 executing program 0: 22:03:04 executing program 2: 22:03:04 executing program 4: 22:03:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:04 executing program 2: 22:03:04 executing program 4: 22:03:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(0x0, 0x17e, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:04 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x16, 0x0, 0x0) msgsnd(r0, &(0x7f00000000c0), 0x8, 0x0) 22:03:04 executing program 0: 22:03:04 executing program 4: 22:03:04 executing program 2: 22:03:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:05 executing program 4: 22:03:05 executing program 0: 22:03:05 executing program 2: 22:03:05 executing program 2: 22:03:05 executing program 0: 22:03:05 executing program 4: 22:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:06 executing program 0: 22:03:06 executing program 4: 22:03:06 executing program 2: 22:03:06 executing program 3: 22:03:06 executing program 4: 22:03:06 executing program 2: 22:03:06 executing program 0: 22:03:06 executing program 2: 22:03:06 executing program 3: 22:03:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') 22:03:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:06 executing program 3: 22:03:06 executing program 2: 22:03:06 executing program 4: 22:03:06 executing program 0: 22:03:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(0x0) 22:03:07 executing program 4: 22:03:07 executing program 3: 22:03:07 executing program 2: 22:03:07 executing program 3: 22:03:07 executing program 0: 22:03:07 executing program 4: 22:03:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(0x0) 22:03:07 executing program 2: 22:03:07 executing program 0: 22:03:07 executing program 3: 22:03:07 executing program 4: 22:03:08 executing program 0: 22:03:08 executing program 2: 22:03:08 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2be3", 0x2}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) 22:03:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) close(r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x9, r0, 0x0, 0x0) 22:03:08 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) unlink(0x0) 22:03:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000003540)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) setreuid(0x0, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r2, &(0x7f0000000500), 0x37d, 0x0) 22:03:09 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r2, 0x1, 0x6}, 0x10) 22:03:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0}}) 22:03:09 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2be3", 0x2}], 0x1}, 0x8800) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0xfdef}], 0x1) 22:03:09 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) [ 261.361975][T11374] device lo entered promiscuous mode [ 261.395163][T11372] device lo left promiscuous mode [ 261.467237][T11385] device lo entered promiscuous mode 22:03:09 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) [ 261.488924][T11372] device lo left promiscuous mode 22:03:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd) recvmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffd49, 0x0}}], 0x400000000000251, 0x22, 0x0) modify_ldt$write(0x1, &(0x7f0000000300)={0x7f0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x81, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24eebeb232cef26d}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000044) 22:03:09 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) dup(0xffffffffffffffff) 22:03:09 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) dup(0xffffffffffffffff) 22:03:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd) recvmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffd49, 0x0}}], 0x400000000000251, 0x22, 0x0) modify_ldt$write(0x1, &(0x7f0000000300)={0x7f0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x81, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24eebeb232cef26d}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000044) 22:03:09 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) dup(0xffffffffffffffff) 22:03:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd) recvmmsg(r0, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffd49, 0x0}}], 0x400000000000251, 0x22, 0x0) modify_ldt$write(0x1, &(0x7f0000000300)={0x7f0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x81, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24eebeb232cef26d}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000044) 22:03:10 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482) clock_adjtime(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)={{0x40, 0x16}, {0x7, 0x5}, 0x0, 0x3, 0x5}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 22:03:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) dup(0xffffffffffffffff) 22:03:10 executing program 5: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811ffff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 22:03:10 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:10 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, 0x0, 0x600, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008041) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa20, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x300, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20000000) r2 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) keyctl$chown(0x4, r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 22:03:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17}) 22:03:10 executing program 0: inotify_init1(0x0) socket(0x100000000018, 0x0, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 22:03:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17}) 22:03:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) 22:03:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:11 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17}) 22:03:22 executing program 4: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482) clock_adjtime(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)={{0x40, 0x16}, {0x7, 0x5}, 0x0, 0x3, 0x5}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 22:03:22 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 22:03:22 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:22 executing program 0: socket(0x1, 0x5, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x30, 0x2, 0x0, 0x4, 0x8, 0x3, 0x800000000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000001540)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/112, 0x70}, {&(0x7f0000002180)=""/159, 0x9f}, {&(0x7f0000002240)=""/250, 0xfa}], 0x3, &(0x7f00000028c0)=""/214, 0xd6}, 0x7}, {{&(0x7f0000001600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000029c0)}, 0x728b553b}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004bc0), 0x0, &(0x7f0000001940)=""/175, 0xaf}, 0x1}, {{&(0x7f0000004cc0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000005240)=[{&(0x7f0000005740)=""/187, 0xbb}, {&(0x7f0000004e00)=""/250, 0xfa}, {&(0x7f0000004f00)=""/200, 0xc8}, {&(0x7f0000005000)=""/148, 0x94}, {&(0x7f0000005700)=""/56, 0x38}, {&(0x7f0000001880)=""/138, 0x8a}, {&(0x7f00000051c0)=""/40, 0x28}, {&(0x7f0000005200)=""/33, 0x21}], 0x8, &(0x7f00000052c0)=""/244, 0xf4}, 0x1f}, {{&(0x7f00000053c0)=@ipx, 0x80, &(0x7f00000054c0)=[{&(0x7f0000002340)=""/96, 0x60}], 0x1, &(0x7f0000005500)=""/121, 0x79}, 0x2f0}, {{&(0x7f0000001a00)=@sco, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001680)=""/93, 0x5d}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)}, {&(0x7f0000001c00)=""/164, 0xa4}, {&(0x7f0000001800)}, {0xfffffffffffffffd}, {&(0x7f0000001cc0)=""/90, 0x5a}, {&(0x7f0000001d40)=""/155, 0x9b}], 0x9, &(0x7f00000015c0)=""/51, 0x33}, 0x8}], 0x6, 0x20, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x2000, 0x3, 0xfffffffffffffffd}, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000003c0)=""/66) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='t', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r4, 0xbe, 0x1000}, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)="afa956f99fd5ca40a2a1515e0d4bba7d88a39d6919ef447e8984c7e0cd4407af0aed3a82dc305722365fc3188e138c41acd2c584ddd617254db80f19a6dae9d7585a00bb7a94c78069051dbbbb88ebde2a6e5b6b75df1a0ce8c65323f27c5b4c2f9a3177e57ddb7135da90f1784d0bf29366e0f2c970aea6115c47b75127e0ef73d614fc9e4a1c750cfaddf118b1f06ddfdf96531ed1ae7a89b3976c09fc52aff0f7effdf05e750548608ee8181e8a64ec66cec78f7b3fc33b37ef434288", &(0x7f0000000540)=""/4096) listen(r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0xfc, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4000, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x1fc}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 22:03:22 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) ftruncate(0xffffffffffffffff, 0x2008002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482) clock_adjtime(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000280)={{0x40, 0x16}, {0x7, 0x5}, 0x0, 0x3, 0x5}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 22:03:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) [ 275.303050][T11487] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 22:03:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={[], 0x11}}, @rc={0x1f, @none}, @can={0x1d, r2}, 0x7, 0x0, 0x0, 0x0, 0xfe01, &(0x7f0000000140)='veth1_to_team\x00', 0x9, 0x0, 0x400}) 22:03:23 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:03:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000), 0x4) 22:03:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:32 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 22:03:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r3, r4, 0x0, 0x320f) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={[], 0x11}}, @rc={0x1f, @none}, @can={0x1d, r2}, 0x7, 0x0, 0x0, 0x0, 0xfe01, &(0x7f0000000140)='veth1_to_team\x00', 0x9, 0x0, 0x400}) 22:03:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:32 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000440)='./file0\x00') mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1010, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 22:03:32 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:32 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000440)='./file0\x00') mount(&(0x7f0000000180)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1010, 0x0) umount2(&(0x7f0000000000)='./file0/file0\x00', 0x0) 22:03:32 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f00000019c0)=[{&(0x7f0000000000)="88ed5b57a37b452eb91bae815a2333882297ed4dd66d1dae68bad9474208e656291e49f9443970be088ced1511e82de4a1981084cdb9de0244441645f1b95ab24c99a25f8232f426a815e871ed75c6184b99bcd8416a8b05aba8968c047dcf5cd7a2579c0eb2ad3e46a16e9c03b5f163c5122300000000000000", 0x7a}, {&(0x7f0000001a80)="0d0ae696672d53bf105f4d1bb0015d31d7645ceb786de344c07d4d22486346ad5c845c9d9f8b633c6df31b62034508bf2cbfb36ea08e093ca303fcb2ec0de16eb477f6a37f7a746f72da91", 0x4b}], 0x2) shutdown(r0, 0x1) 22:03:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17}) 22:03:33 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000007060101f70000fffdffff2ef6ff06000c00010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fde, 0x0) 22:03:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17}) 22:03:33 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17}) [ 285.766103][T11569] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 285.843129][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 22:03:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@filter={'filter\x00', 0xe, 0x4, 0xb40, 0x1a0, 0xd0, 0x1a0, 0x1a0, 0xd0, 0x298, 0xa70, 0xa70, 0xa70, 0x298, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, [], [], 'rose0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x888, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'ip6gretap0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xba0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 285.899655][T11569] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 22:03:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) [ 286.053380][T11573] x_tables: duplicate underflow at hook 2 [ 286.081497][T11573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:03:33 executing program 5: 22:03:33 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) [ 286.201451][T11573] x_tables: duplicate underflow at hook 2 22:03:34 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:34 executing program 4: 22:03:34 executing program 5: 22:03:34 executing program 0: 22:03:34 executing program 5: 22:03:34 executing program 4: 22:03:34 executing program 0: 22:03:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:34 executing program 4: 22:03:34 executing program 5: 22:03:35 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 22:03:35 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:35 executing program 0: 22:03:35 executing program 4: 22:03:35 executing program 5: 22:03:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:35 executing program 5: 22:03:35 executing program 4: 22:03:35 executing program 0: 22:03:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:35 executing program 5: 22:03:35 executing program 0: 22:03:36 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:36 executing program 4: 22:03:36 executing program 0: 22:03:36 executing program 5: 22:03:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:36 executing program 0: 22:03:36 executing program 4: 22:03:36 executing program 5: 22:03:36 executing program 0: 22:03:36 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:36 executing program 4: 22:03:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:37 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:37 executing program 0: 22:03:37 executing program 5: 22:03:37 executing program 4: 22:03:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:37 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:37 executing program 4: 22:03:37 executing program 5: 22:03:37 executing program 0: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x272c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="d6babd38b6359363980af53cf138fcd1941ca38150252569c0dadf0463697a03c705aa568d7935185d8c20448e986ce533747794e3717b8564b3662fca25454f5ff3c1257e8f3cb0b654e5d8f6a6df63722b2779abec3a0dd23fe56bba2f1a2afbf9435e34b7243f40c59ad2c1b80f7173c91f42bc6d62443be110f00f7b983b61cb7d9db33155d7b02a7abaeae1b674bbd9c69ae84ea0c5e2b00554d4b4f710585a2844ab94d7b81f52db483291ff6954ea5b6d40adad098cb5b4b1a3f151671c598d39765ba1bfaf2746716db80fdef82c4a1a359579e1bf516c7f9fb74b09", 0xe0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) 22:03:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pipe(0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8100, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 22:03:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:38 executing program 5: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x272c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="d6babd38b6359363980af53cf138fcd1941ca38150252569c0dadf0463697a03c705aa568d7935185d8c20448e986ce533747794e3717b8564b3662fca25454f5ff3c1257e8f3cb0b654e5d8f6a6df63722b2779abec3a0dd23fe56bba2f1a2afbf9435e34b7243f40c59ad2c1b80f7173c91f42bc6d62443be110f00f7b983b61cb7d9db33155d7b02a7abaeae1b674bbd9c69ae84ea0c5e2b00554d4b4f710585a2844ab94d7b81f52db483291ff6954ea5b6d40adad098cb5b4b1a3f151671c598d39765ba1bfaf2746716db80fdef82c4a1a359579e1bf516c7f9fb74b09", 0xe0) 22:03:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) 22:03:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4008ae93, &(0x7f0000000000)) r3 = dup3(r0, r1, 0x0) dup2(r3, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[]}}, 0x0) 22:03:38 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:38 executing program 5: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x272c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="d6babd38b6359363980af53cf138fcd1941ca38150252569c0dadf0463697a03c705aa568d7935185d8c20448e986ce533747794e3717b8564b3662fca25454f5ff3c1257e8f3cb0b654e5d8f6a6df63722b2779abec3a0dd23fe56bba2f1a2afbf9435e34b7243f40c59ad2c1b80f7173c91f42bc6d62443be110f00f7b983b61cb7d9db33155d7b02a7abaeae1b674bbd9c69ae84ea0c5e2b00554d4b4f710585a2844ab94d7b81f52db483291ff6954ea5b6d40adad098cb5b4b1a3f151671c598d39765ba1bfaf2746716db80fdef82c4a1a359579e1bf516c7f9fb74b09", 0xe0) 22:03:38 executing program 0: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x272c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="d6babd38b6359363980af53cf138fcd1941ca38150252569c0dadf0463697a03c705aa568d7935185d8c20448e986ce533747794e3717b8564b3662fca25454f5ff3c1257e8f3cb0b654e5d8f6a6df63722b2779abec3a0dd23fe56bba2f1a2afbf9435e34b7243f40c59ad2c1b80f7173c91f42bc6d62443be110f00f7b983b61cb7d9db33155d7b02a7abaeae1b674bbd9c69ae84ea0c5e2b00554d4b4f710585a2844ab94d7b81f52db483291ff6954ea5b6d40adad098cb5b4b1a3f151671c598d39765ba1bfaf2746716db80fdef82c4a1a359579e1bf516c7f9fb74b09", 0xe0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) 22:03:38 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x100000001, 0x5, 0x5) 22:03:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) 22:03:39 executing program 5: [ 291.682200][T11730] ================================================================== [ 291.690640][T11730] BUG: KASAN: slab-out-of-bounds in __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 291.699333][T11730] Read of size 8 at addr ffff8880927f4468 by task syz-executor.4/11730 [ 291.707689][T11730] [ 291.710038][T11730] CPU: 1 PID: 11730 Comm: syz-executor.4 Not tainted 5.7.0-rc2-syzkaller #0 [ 291.718716][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.728785][T11730] Call Trace: [ 291.732095][T11730] dump_stack+0x188/0x20d [ 291.736449][T11730] print_address_description.constprop.0.cold+0xd3/0x315 [ 291.743487][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 291.749506][T11730] __kasan_report.cold+0x35/0x4d [ 291.754471][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 291.760469][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 291.766461][T11730] kasan_report+0x33/0x50 [ 291.770811][T11730] __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 291.776642][T11730] ? __kvm_write_guest_page+0x170/0x170 [ 291.782218][T11730] kvm_lapic_set_vapic_addr+0x88/0x180 [ 291.787692][T11730] kvm_arch_vcpu_ioctl+0xf0d/0x2c20 [ 291.792904][T11730] ? lockdep_hardirqs_on+0x463/0x620 [ 291.798200][T11730] ? _raw_spin_unlock_irq+0x55/0x80 [ 291.803423][T11730] ? kvm_arch_vcpu_put+0x530/0x530 [ 291.808576][T11730] ? find_held_lock+0x2d/0x110 [ 291.813360][T11730] ? __mutex_lock+0xae5/0x13c0 [ 291.818150][T11730] ? lock_downgrade+0x840/0x840 [ 291.823018][T11730] ? do_raw_spin_lock+0x129/0x2e0 [ 291.828060][T11730] ? rwlock_bug.part.0+0x90/0x90 [ 291.833019][T11730] ? do_raw_spin_unlock+0x171/0x260 [ 291.838233][T11730] ? _raw_spin_unlock+0x24/0x40 [ 291.843092][T11730] ? __mutex_lock+0x458/0x13c0 [ 291.847873][T11730] ? kvm_vcpu_ioctl+0x175/0xe60 [ 291.852743][T11730] ? mutex_trylock+0x2c0/0x2c0 [ 291.857540][T11730] ? __fget_files+0x30d/0x500 [ 291.862240][T11730] kvm_vcpu_ioctl+0x866/0xe60 [ 291.866941][T11730] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 291.873501][T11730] ? ioctl_file_clone+0x180/0x180 [ 291.878549][T11730] ? __fget_files+0x32f/0x500 22:03:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) [ 291.883274][T11730] ? ksys_dup3+0x3c0/0x3c0 [ 291.887721][T11730] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 291.894158][T11730] ksys_ioctl+0x11a/0x180 [ 291.898511][T11730] __x64_sys_ioctl+0x6f/0xb0 [ 291.903116][T11730] ? lockdep_hardirqs_on+0x463/0x620 [ 291.908418][T11730] do_syscall_64+0xf6/0x7d0 [ 291.912945][T11730] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 291.918873][T11730] RIP: 0033:0x45c829 [ 291.922781][T11730] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.942394][T11730] RSP: 002b:00007f9828571c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.950823][T11730] RAX: ffffffffffffffda RBX: 00000000004e8280 RCX: 000000000045c829 [ 291.958807][T11730] RDX: 0000000020000000 RSI: 000000004008ae93 RDI: 0000000000000005 [ 291.966793][T11730] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 291.974778][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 291.982760][T11730] R13: 00000000000003df R14: 00000000004c672b R15: 00007f98285726d4 [ 291.990785][T11730] [ 291.993122][T11730] Allocated by task 11720: [ 291.997572][T11730] save_stack+0x1b/0x40 [ 292.001741][T11730] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 292.007385][T11730] kvmalloc_node+0x61/0xf0 [ 292.011830][T11730] kvm_set_memslot+0x115/0x1530 [ 292.016694][T11730] __kvm_set_memory_region+0xcf7/0x1320 [ 292.022256][T11730] __x86_set_memory_region+0x2a3/0x5a0 [ 292.027727][T11730] vmx_create_vcpu+0x2107/0x2b40 [ 292.032680][T11730] kvm_arch_vcpu_create+0x6ef/0xb80 [ 292.037890][T11730] kvm_vm_ioctl+0x15f7/0x23e0 [ 292.042589][T11730] ksys_ioctl+0x11a/0x180 [ 292.046949][T11730] __x64_sys_ioctl+0x6f/0xb0 [ 292.051551][T11730] do_syscall_64+0xf6/0x7d0 [ 292.056216][T11730] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 292.062239][T11730] [ 292.064572][T11730] Freed by task 0: [ 292.068289][T11730] (stack is not available) [ 292.072729][T11730] [ 292.075073][T11730] The buggy address belongs to the object at ffff8880927f4000 [ 292.075073][T11730] which belongs to the cache kmalloc-2k of size 2048 [ 292.089243][T11730] The buggy address is located 1128 bytes inside of [ 292.089243][T11730] 2048-byte region [ffff8880927f4000, ffff8880927f4800) [ 292.102697][T11730] The buggy address belongs to the page: [ 292.108351][T11730] page:ffffea000249fd00 refcount:1 mapcount:0 mapping:000000007934bb2b index:0x0 [ 292.117470][T11730] flags: 0xfffe0000000200(slab) [ 292.122342][T11730] raw: 00fffe0000000200 ffffea00029ffa88 ffffea000263d1c8 ffff8880aa000e00 22:03:39 executing program 3: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3813}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17}) [ 292.130944][T11730] raw: 0000000000000000 ffff8880927f4000 0000000100000001 0000000000000000 [ 292.139532][T11730] page dumped because: kasan: bad access detected [ 292.145946][T11730] [ 292.148274][T11730] Memory state around the buggy address: [ 292.153919][T11730] ffff8880927f4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 292.161991][T11730] ffff8880927f4380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 292.170065][T11730] >ffff8880927f4400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc 22:03:39 executing program 0: mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x272c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000001c0)="0c268a927f1f6588b967481241ba0060f46ef65ac618ded8974895abeaf4b48304f922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a75118fbc7c99a785d7677a81e19a5e22acbf746bec66baefdb389b80247bad9a39b493", 0xfffffffffffffc66, 0x11, 0x0, 0x8) write$snddsp(0xffffffffffffffff, &(0x7f00000002c0)="d6babd38b6359363980af53cf138fcd1941ca38150252569c0dadf0463697a03c705aa568d7935185d8c20448e986ce533747794e3717b8564b3662fca25454f5ff3c1257e8f3cb0b654e5d8f6a6df63722b2779abec3a0dd23fe56bba2f1a2afbf9435e34b7243f40c59ad2c1b80f7173c91f42bc6d62443be110f00f7b983b61cb7d9db33155d7b02a7abaeae1b674bbd9c69ae84ea0c5e2b00554d4b4f710585a2844ab94d7b81f52db483291ff6954ea5b6d40adad098cb5b4b1a3f151671c598d39765ba1bfaf2746716db80fdef82c4a1a359579e1bf516c7f9fb74b09", 0xe0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) [ 292.178131][T11730] ^ [ 292.185596][T11730] ffff8880927f4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.193678][T11730] ffff8880927f4500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.201750][T11730] ================================================================== [ 292.209819][T11730] Disabling lock debugging due to kernel taint [ 292.475020][T11730] Kernel panic - not syncing: panic_on_warn set ... [ 292.481777][T11730] CPU: 1 PID: 11730 Comm: syz-executor.4 Tainted: G B 5.7.0-rc2-syzkaller #0 [ 292.491842][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.501900][T11730] Call Trace: [ 292.505202][T11730] dump_stack+0x188/0x20d [ 292.509544][T11730] panic+0x2e3/0x75c [ 292.513453][T11730] ? add_taint.cold+0x16/0x16 [ 292.518143][T11730] ? preempt_schedule_common+0x5e/0xc0 [ 292.523612][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 292.529603][T11730] ? preempt_schedule_thunk+0x16/0x18 [ 292.534987][T11730] ? trace_hardirqs_on+0x55/0x220 [ 292.540028][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 292.546035][T11730] end_report+0x4d/0x53 [ 292.550206][T11730] __kasan_report.cold+0xd/0x4d [ 292.555067][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 292.561058][T11730] ? __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 292.567045][T11730] kasan_report+0x33/0x50 [ 292.571383][T11730] __kvm_gfn_to_hva_cache_init+0x5fb/0x670 [ 292.577206][T11730] ? __kvm_write_guest_page+0x170/0x170 [ 292.582768][T11730] kvm_lapic_set_vapic_addr+0x88/0x180 [ 292.588237][T11730] kvm_arch_vcpu_ioctl+0xf0d/0x2c20 [ 292.593442][T11730] ? lockdep_hardirqs_on+0x463/0x620 [ 292.598736][T11730] ? _raw_spin_unlock_irq+0x55/0x80 [ 292.603948][T11730] ? kvm_arch_vcpu_put+0x530/0x530 [ 292.609071][T11730] ? find_held_lock+0x2d/0x110 [ 292.613843][T11730] ? __mutex_lock+0xae5/0x13c0 [ 292.618616][T11730] ? lock_downgrade+0x840/0x840 [ 292.623475][T11730] ? do_raw_spin_lock+0x129/0x2e0 [ 292.628509][T11730] ? rwlock_bug.part.0+0x90/0x90 [ 292.633463][T11730] ? do_raw_spin_unlock+0x171/0x260 [ 292.638788][T11730] ? _raw_spin_unlock+0x24/0x40 [ 292.643650][T11730] ? __mutex_lock+0x458/0x13c0 [ 292.648455][T11730] ? kvm_vcpu_ioctl+0x175/0xe60 [ 292.653322][T11730] ? mutex_trylock+0x2c0/0x2c0 [ 292.658094][T11730] ? __fget_files+0x30d/0x500 [ 292.662784][T11730] kvm_vcpu_ioctl+0x866/0xe60 [ 292.667458][T11730] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 292.673880][T11730] ? ioctl_file_clone+0x180/0x180 [ 292.678916][T11730] ? __fget_files+0x32f/0x500 [ 292.683605][T11730] ? ksys_dup3+0x3c0/0x3c0 [ 292.688047][T11730] ? kvm_get_dirty_log_protect.isra.0+0x670/0x670 [ 292.694508][T11730] ksys_ioctl+0x11a/0x180 [ 292.698855][T11730] __x64_sys_ioctl+0x6f/0xb0 [ 292.703445][T11730] ? lockdep_hardirqs_on+0x463/0x620 [ 292.708715][T11730] do_syscall_64+0xf6/0x7d0 [ 292.713199][T11730] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 292.719154][T11730] RIP: 0033:0x45c829 [ 292.723040][T11730] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.742812][T11730] RSP: 002b:00007f9828571c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.751261][T11730] RAX: ffffffffffffffda RBX: 00000000004e8280 RCX: 000000000045c829 [ 292.759219][T11730] RDX: 0000000020000000 RSI: 000000004008ae93 RDI: 0000000000000005 [ 292.767171][T11730] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 292.775132][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 292.783089][T11730] R13: 00000000000003df R14: 00000000004c672b R15: 00007f98285726d4 [ 292.791803][T11730] Kernel Offset: disabled [ 292.796138][T11730] Rebooting in 86400 seconds..