6, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:33:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100158000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:33:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x18000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:33:59 executing program 4 (fault-call:11 fault-nth:2): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:33:59 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:33:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x8b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:33:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:33:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000c0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:33:59 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='//cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:33:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:33:59 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./.group.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100158b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='.//group.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x18b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup..pu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x10b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000c8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup./pu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/.yz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu//yz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100160000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:01 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x02', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:01 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\'', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x18000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000c8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:01 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:01 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100160b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:01 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x18b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000d0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x8c', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100168000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:02 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xeb', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xf6', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000d0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100168b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:03 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000d8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x84407, 0x7, 0x0, 0x40000000001}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x100000001, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100170000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x30000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed50500000000000000483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:04 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800000000000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000280)=0x80000001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000d8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10801, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000580)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x200bfd, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x20800000) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x80000004, @name="38e6c094bb1feeab3acc87024196187c76ef7e9c8d6b8d41a9ea9e546c85f4da"}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203680ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000102, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x8, 0xfffffe41) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2b9eb10a16f0550284c4e2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7eb023fc496159e232490ab9fdf39d48559121f76dfc119eb", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff002}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100170b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:05 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(r5, 0x0, 0xfffffffffffffe6b, 0x40000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:05 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:05 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000e0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:06 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:06 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db65869d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff003}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:06 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r2, 0x770cf096, 0x1fc, r0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000000200000e, 0x13, r3, 0x2000000000000000) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff2e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) 03:34:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100178000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:06 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000280)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f630864226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb50da68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff004}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x30000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:07 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8dad94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8622c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000e0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:07 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000280)={0x4407, 0x7, 0x400000, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff005}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100178b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:07 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r0, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0x770cf096, 0x7, r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) connect$l2tp(r3, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1f}}}, 0x3a) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7fff636664226a04810797fdf1fc3940fc7509ed340f47240204829d7222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe00010000bc7a504824062c5b5f5ed54c719d00a60665b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559505a68889e865f1b9800000000000000", @ANYPTR64, @ANYRES16, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES32=0x0]) 03:34:07 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x80000, 0x0) mkdirat(r0, 0x0, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000540)={r1, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff002}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:07 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000280)={0x4407, 0x7, 0x0, 0x10000000011}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6c109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b0800000000000000810797fdf1674940fc7509ed340f47240204829df222c471b1cf851f5d855714cbaad4bf2df4c13379681b32c1562742ebf1b2f7a1a01b9ebe2be2b173bc7a9d00a6f064b448551e95a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d40559121f76dfc119ebe828c3c9f324f4a8cbd9fb669b8689eee62653430be0d38f8860fb9207d09a77c5b66997", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000e8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff003}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:08 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00000ea000/0x4000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b5fe14d35b71fdb905000000f6350a59050eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e4851307a5a564354b59760f902e8f90843e2b1db6c8d8d94ed6b44b7f7f636664226a04810704829df222c42df4c1c8649c9064ee1980865c3379a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00ffff64b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d485591200000000000000000000000000000000000000001aff70a1dee360bde730b30618ca36a125d9efe5bc167bab86c0d28d73398aeee9341937f02f2b530f8446ce0c8c35bb75723bbe", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100180000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff006}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:08 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x28}, 0x20000002f}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:08 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000280)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff004}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000e8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff007}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:09 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000001) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:09 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRES16=r0, @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff005}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100180b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff008}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:09 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r2 = userfaultfd(0x0) r3 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000640)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000280)={@loopback, 0x29, r4}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r3, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r6}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r8, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r9, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r10 = openat$nullb(0xffffffffffffff9c, 0x0, 0x7ffffc, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000800)='fuse\x00', 0x4000, &(0x7f0000000d80)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f0000000680)=ANY=[@ANYRES64=r9, @ANYRESOCT, @ANYPTR64], @ANYRESOCT=r6, @ANYRES64, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r2, @ANYBLOB="bbcdefff787f4623f9321f5d781ad292b5f6dfd0f310743d9cd58a5ac51183e7a4c961d7b2272fdf8a8e3488d28456bc2573e942631e9f506632c264503151d63942d48d1576e4c39353072a45aa232d0ce862c93ad30db0d278b906194803a8546c66c243637842bcbb7848eebb95fcee256b62341d71795baed5e6b9f01c8a9eaa86b98d875132b2edd2e070652e4d9fee49000c410c890233a6946efd6e9c3d0cd4", @ANYPTR64, @ANYPTR, @ANYPTR, @ANYRESOCT=r1]], @ANYPTR64, @ANYRES16, @ANYRESDEC=r10, @ANYRESHEX=r7, @ANYRES32=0x0]) 03:34:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff006}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000f0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff009}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:10 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810300fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc65504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:10 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(0xffffffffffffffff, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES32=0x0]) 03:34:10 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100188000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:10 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff007}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00a}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:10 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:10 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000f0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00b}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:10 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000280)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @name="f914a43c85ad142e4f92ff234769a542f70f1e40c592be54602d5135edd89c1e"}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00c}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:11 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='vmnet0bdevppp0[\x00', 0xfffffffffffffffe) add_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="7406d6b234a6878fb26c8dcf3927072f9ca4d9597037be1f13c3a07fd4bdfeb0e864a578c0ffd0f110bcabad6c6540aa353c0d8382814f478f6166c2b6444c1995e253d08578c31b5114b1d9d204878c951a7ce4cabe5e8cddf5d2126fb6f37e1458612651ff4451dada77ca1a93ef7031f21003b8ae63809605c7eb160498e9520b202c349b67542179509afd2aa9ff535f5a76326db352250bec83b924d068bee7566c04c6c5bccc26102b0784fab43c8d69decfd6af29867a0ab30ae50b1c93a5f36ddd2a09a2d300277492f527b941e2f3659831", 0xd6, 0xfffffffffffffffa) r6 = request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='vcan0\x00', 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x373d7f2115df1261, r6) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000500)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="54fe14d35b71fdb9aee6d9a6f6350a59bd1eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c1f00e315832c3562742ebf1b2f7a1a02b9adbac1b9ebe2be2b173bc7a504824062c535f5cd54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc484159e2300000000df39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100188b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff008}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:11 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x6001fc, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00d}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:11 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000f8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:11 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d8960100000000000000c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:12 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000580)={0x3f, 0x5}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100190000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff009}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:12 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x20243c, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2d425f8d45ee202a8ed44d5a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df262c42df4c1090000000000000042ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e2324aa7c9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00e}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:12 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x17f, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1000f8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00a}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:12 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(0xffffffffffffffff, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES32=0x0]) 03:34:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100190b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:13 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r2, 0x770cf093, 0x20000000010007, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000580)) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000005c0)) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000740)='coredump_filter\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000540)=0x335, 0x311) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec72662881812fae8a6d89610e48513072b1db6535eb6acbbca1ed596cea368ce63c8d8d94ed6b44b7f05000000000000000797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a50482426ad535f5ed54c719d00a6f0efb77920b574e9444dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00b}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:13 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) set_mempolicy(0x1, 0x0, 0x0) 03:34:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00f}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100100000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:13 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x44000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:13 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00c}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:13 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000280)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100198000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:14 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000640)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00d}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff010}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:14 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000280)={0x4409, 0xffffffffffffffe1, 0xffffffffffffb663, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x8fc) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600204, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1f222c42df4c1614a681b0800000004000000f7a1a0eb9fa57b23c1be09681b9ebe2be29673bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc494159e230490ab9fdf39d48559121f76dfc119eb505a68889e8662c896cf52b608f298000000000000000000", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100100b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:14 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000100)) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x8000200000e, 0x10, r3, 0xfffffffffffffffe) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @name="223563a6351ebbd36eb23fb1b10555edd992c0bc9b7f690759992a1722b5dc77"}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0xfffffffffffffffc}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00e}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff011}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100198b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:14 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./syz(i\x00~\xbfv\xd6\xa3\x00\xb2\x00\x00\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:15 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829d0622c42d09000000681b32c1562742681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898000000000000000000", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff00f}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:15 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f0000811000/0x2000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100108000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff010}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:15 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x400, 0x0) syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x9, 0x8180) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x7fffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/audio\x00', 0x2100, 0x0) r0 = open$dir(&(0x7f0000000600)='./file0/file0\x00', 0x40, 0x2) mkdirat(r0, 0x0, 0x3) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r1, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1e1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c15627428a7eb2f7a1a0c1be09681b9ebe2be2b17381f9504824062c535f5ed54c719d0da6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c89864fc902e063a3494b42437e2af700ba60edf81ef4b03b1ec4decb32d7cf12070c692c6f842a9c3d80c450b68c2ee0c0031454c2dd1c0718076c207ef5da59361f17ad562094337aff8c8e1c12c597850e745f18706", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:15 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000540)={{0x2, @name="2368ac541029cdabbffaa0f748c99da1ead471cfaa2bb62108d0a3f4dec11eaa"}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d8a210e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c71e73f769d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc4962ae7a34b4b80ffa4c119eb503968889e8662c898e9f838b746bd281322b72550e00a854e0689ad26749af4577fc5f51a94bd947a", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff013}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898062da82a06a633bfd139e454b549e1a5fbf2e307e60e26af80e1167991f0c8dab1e2fb71e202676b6a87551cbe5d6af75a5a559d83debde5c0", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000540)=0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100108b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:16 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff011}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b448d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:16 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff014}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:17 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = userfaultfd(0x800) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x31169bff) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000580)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000280)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:17 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14535b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc10989698dbd88d2406d897a0acd41fe1c1ad5c5063ec7266288ec44a5847458c322a5ef13072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf186a0f5612254563e736268b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c71a100a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c8", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff015}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100110000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:17 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='\x00\x00\x00\x00\x00\xff\xff\xff\xf5', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff034}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:17 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r0, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc1098969b7fe1c1ad5c5063ec72613072b1db6cad8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a5048240649535f5ed54c719d00a6f064b4e7920b1ae8837eda7c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898000000000000000000000000", @ANYPTR64, @ANYRES16, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES32=0x0]) 03:34:18 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000004c0)={0x2, @vbi={0x0, 0x0, 0x3132564e}}) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r7}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) 03:34:18 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e842da46a2e297913730415c727d5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:18 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x80800) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000140)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) r6 = add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000e80)="f1cb9abcf2704d6122b32876ef36c3b2ad8f861352e818e0882edf57afe59e393aee60d6d0d418658444eca1f7cd5e3a15aa10c91eb008bbebd07f4a63abe3059fb48629031f8fbee905694cbf3beaa70011ec6fb2802c1c427ae27265a30e5a8ea2bcb9a4b4ef6ee1e7fa9a7288d854dddd8625cde5f67fe4087e23fe556a25000d6d639a9630c1119b7d93592ae4c5bf33d06b972e7a43dc469a1b2565e84e2a3a872d69ab310d2f52128c78a9e36225b62c9036840f8ed36e40c8be76eb56b4158fcdd05a1af572c55098bf0120d8fb3342262a35d0f365011671a9acd8f789f954a73f4497ca0bd87959321ffce3c8eb62f3832ac4a156fce5ab97aaa7b651bbc334b178763b475f0fe379bcb81e2dc2b919ad754b617e96ca9fa2f37db1f5499a32fd408a422075778fbf5c7b7ecf816760d7f7626f2b7c09dfe52d49a3278b775720268c344567bf4bd4628bdec883e0ec8777187a2f6fa55eaee29040e5737355d7b94c19536790db44f360972dce0f4534ae828dca51b6d666d6adc3153e87ff21b4e54b8db28ce06833a80ac6a2c1346eebae63b51f424a4e188efd6a05406f89b2ab56eb09413c36fe8db6502f881160228e4ed9d1a6e569aadb8a4a9c1ee66d998bcd8bc00dc123790b9e73fed5dbf5fc26733e7dc287b2ff068048401bfbd6170f32daf03201cfb1615b5a21d655c25b8af5599b7c4c9e13bdc50f1c5e670682d7926344590af28140671f92f57158ff6d2317b83e1061f3bd92ea080b8da99e0e2783c0bbdecc3c9b2287b43cef534be2bab1d1693f5c33080e286ced3b12ca789cb8b187748f7fcc454df99d115cd6654d11ca9781a8a77f7da9633fd25dd5d93a2d57e5959572953dcf6c87c63eef9ad54732be40c1e22d9b858da5e0194c1407d2b6f3ada3c510c36e2607a6b0296fd11c0dfdef8b4b3948bf4dcbc453fda997691e6b018639bf8e0e5774f2f0b6ceeed1cd7ba7df44581b580ce92cc550917036d46b186d41ffb867d1c2eccc641870d60ae30b168e9f0cace061707126bd370ebb111cb197c5c5b418abb22a515beb79750c5766b7ff8c96e24f3f01f469b9486c28f4f68175e27b3cac94eb1511aa01a40d1781ddd8f47dae5fc5cb72f5e0e96851fd1282ccb9c62d2f36c2799273289931648aa534251bdb5c7c34eb15ee932a2b9b5f5916d1f98b607065d66ccf989e5d1e1e36351d00102e4e89d312acac20ad103d60c6ac3f637ced48a93657d1f7f7888813238a876a9f8506c832ba4abfc27e9c3c61fc1cecee7cd77cbb3f83db95d8daed69384ee57e28cc3d5eb438db58d252172902cb9f3a523c6b78d8070f7d1ae41679a50181ad4bac3ccf225561a9c09b40dc85ea68521ddb47de5cc1ecaad2ee1b0515f7efd0e4a0b1afa52263ea4b3fbf9966af6e15d05b1f897257500660343f9430caf4883565d5a847f5bab14255f36e50bb1ff3af628f42438aee51919fd10bc07f9a221a2d77e39d6a0e6531918c7c4bf3528954c2f1e5335dabef04fc180314f9e129064dd1ac6d645a9b0016ec008f46f2311fd8bee16f890f77c9af1c1e25ed57f366f33c69d014f1a950a05f9e54aff581864ef7f72965ea310f04fbf3b0b54bf0258b56d0ba178cd5c3c42435aa3fc45af2d0e883e38cb4fe1fb1a54a896809280047501874f10b502557a632b632ecf7dbff328a6f7fd05c0079d194d3650b72972715a6a52feca4128c795349118948eb3b4612175514a16aa2c8db61138f486b6aef4eb013b5994e98ffde733bff95810d0f82cbb220527697790758b37a3368ce04b7f290c3528c99f3cda3873fe778ec33c4791470619187ae0fc65da54bb900f4ff7817f606bfd39e8a72914286ee7f46e8baa74e1a7cbf3198292c55c2fb7a7f29f4ef6fc8a19bc1ddb72da5945357a9bd25e271b101b81678977295313213417729dbb2036d4a25ff9a619aecdf7c04e76b7421092a2e78541b030fbb4df944d7e192b6e74392d0b4b9dee581b39f1ecaf85449f16068f94951869b418edde6d6160eb7505e78c8764415c97a8ed7b420b1124f296f5c8dc432c7603b81ae11de36902de09a61407ed336e2f8ba415e6d779c27742d25af03dbb4b00e4eb46d005dd617933ea603c5f84e010c20e8262ed28ca88d743b01382d58ba2762be6cc4bba70bf2a58dc17bd3f7edcd6fd446ddbf010ddd37a21399cf25358a93b5bb561adbbd31fdd16434f92fafc32701de50c165c2c8f5dad8b38162622626a02eec0b1d929a5a3b5897479741261d1b04f18045f6d0fce030f1a8acb5dbf929fff0b2df93b407f4276634b6654593c1568402182d44a23f56e57f3484b51a565fa15279da529bb6abc3486e8d637d3edf78358c81bae45b95e5ae9b07ebcf854b8b2f53ef4a074c69899043b8ba194cbe5660268680ff7a96ee649c082f6dcb408434a3bba0cacefae2742849e78978a63b4320c13ce59554f0341e270784111219840472eb39525b5a43a00ea3df3738518c11d53645e3f18d2e0177025470019a20dddccee51b6eb76a194f95269448db438b030b6c772194e1df6985f5857aec0daba62069b0f65daa586d20c5d9c7d2ab2f7c28d3c5adc54789771b2d16508f6376fe1160f4b94cef80f7e4343622fa9e2b700832d343b14bc2caa9f522d3f68243988269f0aed379e7932ec72ded78052341253bb603eec4d9021f4588c1cf9cf81eec1840cac977c1ba7334613e1a49a1945612cc4fd5ef9d3088defc68d468a5552356a6394d1254305a427843716da005f0021dc501fb2575eace5ac4e8311329f4cb257a3050fe89e7ac72b2abf956ade5ce432216e583e396e1ce5087cdfa0805ceb64a0ecf199fdba6a3dc0a6dcdf5d253339bace0dee19c80c50d4f60446133ae0e5a36a2f77c05d90891b2ad6f074b2a73dfa07fcb54d04437737e6b706c9e6dacf5f4cbc3d824c754f2f2893420d34518b4d2115b67bbd533d924a9c2c2bbcfd78aa514499698035345221b0c04724d622de7a4a9a85aa2a0fbdea1a91e1596f34f16a839903a7d3bff92f88f21cf257d897df8ae7126e483840853c3543ef69feafd1d739c292024d882345fc114c7f1f34b2bdae8e113634d4a37db3bee916a64976d30c44ea3e2eee9195e7551038698e1f9c82f2a834269f65101540de52a84f9b7616b08ac25dfc6005e57cb33210bf965d4b4a33e0c130525d3a9489c7a076a8472e661d5c14686144eb4ed60649bf8aad6046e60f22e0b5e5c17fc1fbdbd2bf09899fae93f1c6e75e6c561ae45fcbed2aa27ead11a8cc556680fd21a255553c9c8b3de49ea72b79f2dad5233c29d2a13f3ca5d35d96d77f6fb1f5a25a073f7721ffe46f20e8566367ff8089fc064b9a78b4bea0804ed6500f7dae98dbb1a9700f43eceefea7b3f69a5b58a8cb78830f612bf86c0f8280d3d9eb08a7f1cda34d665cf3700ac562f37d0eb2804a3653287958eca4070b33cf833702209813de3cc23be1c18365deb75a7e46dc2d51baf5a38dab97176d9702db1e1df42b15911c98cf7f65871ba6f19922690c3e91848d3b980b0906df47bbe1f4b6f0cfdea83bb1f48e8047d265ca6ba2abb14eb4ff608b5fbc55e3d95ae2c69710b939ab1ae4dda3047e7a4639cab634d1a1ae4beb95165836855ad284d819fda908628764cbd5c92d35d84c6851c034ede153d3b3ad6ac5e95ad9a7240b1a8327c087ed06c43b2ce710012e4db45ecce738ec14d53d653bc7f0c005ee5aa97b3a716f9f707b0249125f29ab79ad40843055d6c5c996355c583066269e7b0d643233682ac53f3ce3686dab2eab1415e71f5a334eeeb8f3d20a56bdad1fff1fa8cbaff8f497a7b1d2d921d8593ce49fca5bd843668e28c747d60bc1414ff9593bc7b6111ebc4e9ea7258f57108d1004e80075ccc2f52c03bb3db7adc790e326ed11d30aee635bb70e3a0d469ef29db7f3412600049165da3015b4c52c75d38e2a9bc267983bc27cc039fa84c27af0da1bb75912b7cab767c04b489519ab49e007033459ede761abc6e2f8d347428acd96a0eb29222db2171ffd0df7089ec59c54beb581ca7bfadbd0e3456f320868e669593e0a4777a4248212f642e1d42385ce8ed314ced3dec704ea5bf286ed3cc6ff962ed13b8c9b2d70e62407f600d03e3da5e2ab2c0256116340e6d791a09145e2877e5d3adbf46be2b6c5f482ae1ad61b99796162b610b8e8313b4f140077fea022b7b6448f006c70736970bea94c623e632799ecd69d6cb436d4b38537da44b1d4933e942e1d7a87033501d7e4670b1d80023370005b79073b488d00bb1df1d96d6c195e06eca4a3a231188a6e85c4ba23d949de315391cbf1991a93e3c041d506b914128ddf40286751581bd5461ee81fd27eb3d45376e735c2644c0b447c590341c5de7b1309b6dff9d81b03348f848770c9d15ddfb6a5a044d05cd2fa6838060d7a813b074a8826c71eca24cf00071292d9252c455738f09d3c7cbc9a5857703d2f0053ea270d8a353e775f072a600808b635f762644ab6be607047c1052c1ef9b65ec96d2c0abe1a8e0b9cbb146da30f5b63ff07215302b7e43236fcd7bd44858e36a02b5c70d8f1312d7eb9f32921925726cf91497ecf9d04ea6be9c0a29439fd53831bf9b4e49d0b41f0454e76f54ccdf3d35b00d2e4be53bcebfa5e2a67b3412239042d835de8e59d0fdab6cd796650a0f5b8bf7dd58a8a556efe401092673fc7f708ab77d7c2da6a8d3d0c198b17d7d0612c8675a7be61e53bea2e1f5dec9573dfe80eb49ed39a053f22219e3c0e20392a322133c42688daa8bb37c0aa97755b37280fcc5a65614630612503fa6d95a653b7d78472ab9999bafeeab760255a93dc9405a28185b6d7c6ac916b8bca2b06620fb10a065d7c70f22c9ddb5b312ad3f81e825148adc70f35e415c3d1a0c42259953e0f402d5c966483147d9bbd46d3182399344945a9c855bccb669059446215773036dccb781e5a35b98957f2cdd3c1ed023fa2d78305caaa2766853f660fa9947f3aabcc3eabd34627c5e5428799f83f4db7a8e93101d7c205f793d9260742f1ec6ebe9d0cf604fe8ae9753fbaefb1622922e746493391d13cb3483c54166563bcd24c9b581244d1fed0bcb9bbf5eddba399aab986465c36f7be21915c95cf48ef3a0d2bd44513210b9f0a456c2715ded5d374dca0e7507d755b99e475b6bed8f401657509451672462bbd1e80237593d03ed5dac77edfc9e6fa89eed93ef7537b4b74e5c1b21c42f5a4ad51a896296bb680f3de787fa581a1255c150278a3aeb432a6290aaa09ae2c2bc14c220f39a42d64c66ee77165749a271074e273186f5c89d175c26652be144b93cf59a84c3c74ba6c0b32d72584a5b1920e38c5462637b8fe1347dac6cfc646603b9e2f6cd5af3d4529c7cb56f7a3dac540a676a11992407f9d2b67feaf8f5a7d220fc6329f62b55fefca7bbff827ac7bcc567a70fad0f8cfec30a52d5273c0ed458fd7225f18917f57dd48578348e42d8abd8f50febe98480e767240ba516f6162b39599fccc4d22e2b8d41fd9fe85055af661efc54cbb5dff221fd5908e17b2d9bc7cbf5a40cbc43fef9682129bc14394eef1400c1987ed37cff368fde934d72f52a916f6181a2f0efaf0e44de131b2cd8ac2c85aaf7aa78ca9213add425bccc17049a0b37b1e98176f3b1b2ea2268956e275b7012890105ff8a270502c0a5c6b18bf072e01ee0f885d8902f419a015ced5cba7fd467b17e88c3503b36ff0f2bcd220e3c88", 0x1000, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, r6) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x200000000802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[]) 03:34:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100110b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff013}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:18 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0xfffffffffffffffd) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x149000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xa0002ac0}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:18 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x80003) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000836000/0x4000)=nil, 0x4000, 0x200000e, 0x17, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f456664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a104000000681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:19 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100118000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:19 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(r5, 0x0, 0x0, 0xfffffffffffffffc, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff015}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:19 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:19 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:20 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7514ed340f47ae5d240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f344bb2fa9d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100118b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:20 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000280)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:20 executing program 4: mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffea1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000006c0)={'vcan0\x00', r6}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x806, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fcfd0c7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9f434bd3cb809ff36227d7fa66df39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff034}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:20 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b5483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x3, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:20 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xa0002ac0}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x4, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100120000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:21 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x101000, 0x0) mkdirat(r0, 0x0, 0x3) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x80) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r1, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a12950c87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:21 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) r7 = request_key(&(0x7f0000000280)='rxrpc\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)='/dev/nullb0\x00', 0xfffffffffffffffb) add_key$user(0x0, 0x0, 0x0, 0x0, r7) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00'}) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1a07c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d4855912505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r8, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x5, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:21 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000540)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x7, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:22 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x5, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f63ffff000000000000fdf1fc3940fc7509ed340f47240204829df205c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824462c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100120b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:22 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x2, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x3, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:22 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) request_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='/dev/radio#\x00', 0xfffffffffffffff8) request_key(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)='.[\x00', 0xfffffffffffffff8) add_key$user(0x0, 0x0, 0x0, 0x100b4, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:22 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000600)={@ipv4={[], [], @empty}, 0x0}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000700)={'vcan0\x00', r6}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x8, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100128000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:22 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@loopback}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r1, &(0x7f0000000480), 0xf0702c976ffea55, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x900, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x6, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8f84ed6b44b7f7f636664226a2ec3bba07e1057e225bc0d924321d09a04810797fdd4e5537405df61abfc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3021f76dfc119eb505a68889e8662c898006d9033b3b9361999", @ANYPTR64, @ANYRES16, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES32=0x0]) 03:34:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x4, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b024a1a0c1be09681b9ebe2be2b173bc72504824062c535f15fe417156739b5ed54c719d00a6f064b4483a7795a1294dc97c0a981d05e02824c496159e232490ab9fdf39d48559121f76dfae19eb505a", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r1 = userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0x1) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) write$binfmt_elf32(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xb25) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0xfffffffffffffca2) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) 03:34:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x9, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x5, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100128b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:23 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:24 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000280)=0x4) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$getown(r1, 0x9) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000540)) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f00000005c0)='oom_adj\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:24 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x7, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:24 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x80000) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023faa5a07d4b066eff38f565cadc496159e232490ab9fdf39d48559121f76df", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:24 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc0040fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c71b100a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100130000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:24 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r3, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r6, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7fff636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3d6629574093a2a3bd5eb85023fc496159e232490ab9fdf39d48559121f76dfc1", @ANYPTR64, @ANYRES16, @ANYRESDEC=r8, @ANYRESHEX=r5, @ANYRES32=0x0]) 03:34:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x8, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350eb2a64e852da46a2fc10989694101000000000000002662754ec1d988ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889eb662c8", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000140)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = getpgid(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000b00)={0x5, 0x70, 0x10000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2, 0x7, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000001c0)=0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r5, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797c710371340fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r4, @ANYRES32=0x0]) 03:34:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x300, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x2081, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x322, 0xfda9) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100130b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000980)={0x0, @multicast1, @local}, &(0x7f00000009c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r6}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1fb6c8d8d94ed6b44b7f7f636664226a04820797fdf1fc3940fc7509ed340f470204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc111eb505a68889e8662c89800", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:25 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r2 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000280)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r2, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESOCT=0x0, @ANYRES32=0x0]) 03:34:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x9, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:26 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681bb2be2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x8501, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:26 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x2a) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) lstat(&(0x7f00000006c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r5 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000280)={@local, 0xfffffffffffffffe, r6}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r5, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000380)={r1, 0x770cf096, 0x7, r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r9, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 03:34:26 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000440)=0x1000002000000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f00003cc000/0x2000)=nil, 0x2000, 0x200000e, 0x13, r3, 0x24) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000640)={{0x84, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000280)={0x0, 0x7fffc}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d4855912a0e6ca540000000068889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100138000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:26 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x800000000000000}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000540)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="d3fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f472402048299f222c42df4c133f9681b32c1562742ebf1b2f7a1a0c1be09681b9efad6dfb352be2be2b173bc7a504824062c535f5ed54c719d00a6f0640000000095a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf398662c89800000000000000000000000000000000000000000000000000", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:26 executing program 4: creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x2a) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) lstat(&(0x7f00000006c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r5 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000280)={@local, 0xfffffffffffffffe, r6}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r5, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000380)={r1, 0x770cf096, 0x7, r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r8, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r9, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 03:34:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:27 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x2081, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x322, 0xfda9) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x10002, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:27 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x2081, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x322, 0xfda9) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100138b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:27 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x2081, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x322, 0xfda9) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100138000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xb, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x10a00, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100140000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100138b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x300, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x124f4, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100140b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r1, r0) 03:34:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) linkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x8015f1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000500)) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0xfffffffffffffff2) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) 03:34:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x8501, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x14b43, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001e0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100148000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x10002, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x18000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:30 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001e0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100148b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:31 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000080)={{0xffffff94}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) 03:34:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x10a00, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, 0x0) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x20000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001e8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100150000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:31 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92}, {0xffffffd0}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 03:34:31 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x3d99, 0xffffffffffffff00, 0x6, 0x80, 0x0, 0x4, 0x101, 0x0, 0x40, 0x3}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 876.028720] input: syz0 as /devices/virtual/input/input7 [ 876.081229] input: syz0 as /devices/virtual/input/input8 03:34:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x11c30, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 876.318175] input: syz0 as /devices/virtual/input/input9 03:34:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x28000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) [ 876.499196] input: syz0 as /devices/virtual/input/input10 03:34:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001e8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100150b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 876.750411] input: syz0 as /devices/virtual/input/input11 03:34:32 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 876.913450] input: syz0 as /devices/virtual/input/input12 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 877.074319] input: syz0 as /devices/virtual/input/input13 03:34:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x13ed1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 877.235651] input: syz0 as /devices/virtual/input/input14 03:34:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 03:34:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2a816, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) [ 877.402740] input: syz0 as /devices/virtual/input/input15 03:34:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001f0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 03:34:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100158000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 877.565667] input: syz0 as /devices/virtual/input/input16 03:34:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) [ 877.715966] input: syz0 as /devices/virtual/input/input17 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x18000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2bffd, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001f0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100158b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:34 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 03:34:34 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 03:34:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x20000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:34 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 03:34:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:34 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2cc35, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001f8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100160000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x4}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x28000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:35 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2e702, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:36 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001f8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100160b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 880.173775] input: syz0 as /devices/virtual/input/input30 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x2c76f, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 880.620362] input: syz0 as /devices/virtual/input/input34 [ 880.730951] input: syz0 as /devices/virtual/input/input35 03:34:36 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 880.822808] input: syz0 as /devices/virtual/input/input36 03:34:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x30000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100168000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100200000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 881.012154] input: syz0 as /devices/virtual/input/input37 03:34:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 881.215567] input: syz0 as /devices/virtual/input/input38 03:34:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x30000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 881.453120] input: syz0 as /devices/virtual/input/input39 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 881.651037] input: syz0 as /devices/virtual/input/input40 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x31188, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) [ 881.790963] input: syz0 as /devices/virtual/input/input41 03:34:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100200b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100168b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) 03:34:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) [ 881.965166] input: syz0 as /devices/virtual/input/input42 03:34:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) [ 882.107141] input: syz0 as /devices/virtual/input/input43 03:34:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) 03:34:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x33eaf, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 882.239023] input: syz0 as /devices/virtual/input/input44 03:34:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) [ 882.357063] input: syz0 as /devices/virtual/input/input45 03:34:38 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:38 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x38000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:38 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100208000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100170000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x38000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) ptrace(0x8, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) 03:34:39 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0xccbf}, @connect}], 0x100000209) 03:34:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) 03:34:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x3d6f4, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x3d99, 0xffffffffffffff00, 0x6, 0x80, 0x0, 0x4, 0x101, 0x0, 0x40, 0x3}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) 03:34:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100208b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:39 executing program 4: ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r0 = syz_open_dev$admmidi(0x0, 0xebc, 0x103140) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000580)="5f39203a1ec6", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = getpid() write$FUSE_BMAP(r0, 0x0, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x3d99, 0xffffffffffffff00, 0x6, 0x80, 0x0, 0x4, 0x101, 0x0, 0x40, 0x3}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ptrace(0x4206, r2) socket$inet6(0xa, 0x0, 0x7) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) 03:34:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100170b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:39 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 03:34:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x100000000005, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) [ 883.861012] input: syz1 as /devices/virtual/input/input46 [ 883.891407] input: syz1 as /devices/virtual/input/input47 03:34:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x3e537, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 884.070661] input: syz0 as /devices/virtual/input/input48 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 884.244709] input: syz0 as /devices/virtual/input/input49 03:34:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x40000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100210000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) [ 884.522171] input: syz0 as /devices/virtual/input/input50 03:34:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100178000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 884.673980] input: syz0 as /devices/virtual/input/input51 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 884.783973] input: syz0 as /devices/virtual/input/input52 03:34:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x40000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 884.871046] input: syz0 as /devices/virtual/input/input53 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 885.006256] input: syz0 as /devices/virtual/input/input54 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x48000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100210b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100178b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x48000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:41 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:34:41 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:34:41 executing program 4: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:34:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x50000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100218000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100180000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x4a6df, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:42 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x58000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100218b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100180b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x50000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 887.631335] input: syz0 as /devices/virtual/input/input70 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 887.727351] input: syz0 as /devices/virtual/input/input71 03:34:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 887.826976] input: syz0 as /devices/virtual/input/input72 03:34:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100220000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x60000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100188000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 888.053080] input: syz0 as /devices/virtual/input/input73 03:34:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 888.259676] input: syz0 as /devices/virtual/input/input74 03:34:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x52056, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) [ 888.455912] input: syz0 as /devices/virtual/input/input75 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 888.617209] input: syz0 as /devices/virtual/input/input76 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 03:34:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x68000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) [ 888.720639] input: syz0 as /devices/virtual/input/input77 03:34:44 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100220b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 888.854206] input: syz0 as /devices/virtual/input/input78 03:34:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100188b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x58000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:45 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x70000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100228000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100190000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x60000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x78000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100228b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100190b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:46 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x68000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x80000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100230000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100198000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:47 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r3, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r6, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7fff636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3d6629574093a2a3bd5eb85023fc496159e232490ab9fdf39d48559121f76dfc1", @ANYPTR64, @ANYRES16, @ANYRESDEC=r8, @ANYRESHEX=r5, @ANYRES32=0x0]) 03:34:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x70000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:47 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100120b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x88000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100230b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:48 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100198b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x78000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff034}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x90000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100238000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:49 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x80000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff034}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x98000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100238b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x88000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:50 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff034}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100240000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x90000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000004c0)={0x2, @vbi={0x0, 0x0, 0x3132564e}}) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r7}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) 03:34:51 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000004c0)={0x2, @vbi={0x0, 0x0, 0x3132564e}}) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', r7}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) 03:34:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100240b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff008}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001a8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x98000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff007}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:52 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:52 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000200)={r2, 0x770cf096, 0x1fc, r0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4000000200000e, 0x13, r3, 0x2000000000000000) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xffffffffffffff2e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) 03:34:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xb0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100248000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:52 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10801, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000580)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYPTR64, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x28b20}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xb8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100248b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:53 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:53 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xf6', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xa8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:53 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xf6', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xf6', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xf6', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100250000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xeb', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xeb', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xeb', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xb0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:54 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:55 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\xff', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100250b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100250000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001b8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xb8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xd0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100258000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x02', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x02', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x02', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/.yz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:56 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/.yz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xd8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100258b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:56 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000340)={0x4407, 0x7, 0x0, 0x1}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000000b00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x10800, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000001c0)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/.yz1\x00', 0x1ff) readahead(r1, 0x4, 0x6) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000380)={r0, 0x770cf096, 0x7, r2}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) sigaltstack(&(0x7f00004ae000/0x1000)=nil, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000003c0)={{0x4, @addr=0x100}, "fb9aabe6ba26b56029706a7ae0bea7c6a68d22c4825203530ae621d3d4f2722a", 0x1}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) preadv(r5, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r6 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100)=0x335, 0x4) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000500)={0x0, 0x80000}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="b5fe14d35b71fdb9aee6d9a6f6350a59bd0eb2a64e852da46a2fc109896941fe1c1ad5c5063ec7266288ec44dd26a6d89610e48513072b1db6c8d8d94ed6b44b7f7f636664226a04810797fdf1fc3940fc7509ed340f47240204829df222c42df4c13379681b32c1562742ebf1b2f7a1a0c1be09681b9ebe2be2b173bc7a504824062c535f5ed54c719d00a6f064b4483a7795a1294dc87c0a981d05e028d7e3023fc496159e232490ab9fdf39d48559121f76dfc119eb505a68889e8662c898", @ANYPTR64, @ANYRES16, @ANYRESDEC=r6, @ANYRESHEX=r3, @ANYRES32=0x0]) 03:34:57 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 901.095226] input: syz0 as /devices/virtual/input/input79 [ 901.130850] FAULT_INJECTION: forcing a failure. [ 901.130850] name failslab, interval 1, probability 0, space 0, times 0 [ 901.159664] CPU: 1 PID: 16265 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 901.166648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.176001] Call Trace: [ 901.178603] dump_stack+0x172/0x1f0 [ 901.182263] should_fail.cold+0xa/0x15 [ 901.186184] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 901.191312] ? ___might_sleep+0x163/0x280 [ 901.195491] __should_failslab+0x121/0x190 [ 901.199731] should_failslab+0x9/0x14 [ 901.203526] __kmalloc_track_caller+0x2d8/0x740 [ 901.208190] ? pointer+0x910/0x910 [ 901.211741] ? __lock_acquire+0x548/0x3fb0 [ 901.215992] ? kasprintf+0xbb/0xf0 [ 901.219553] kvasprintf+0xc8/0x170 [ 901.223107] ? bust_spinlocks+0xe0/0xe0 [ 901.227086] ? debug_check_no_obj_freed+0x200/0x464 [ 901.232111] kasprintf+0xbb/0xf0 [ 901.235487] ? kvasprintf_const+0x190/0x190 [ 901.239920] ? input_default_getkeycode+0x520/0x520 [ 901.244980] input_devnode+0x4c/0x90 [ 901.248748] device_get_devnode+0x175/0x2e0 [ 901.253102] ? refcount_sub_and_test_checked+0x154/0x200 [ 901.258602] devtmpfs_delete_node+0xaa/0x1a0 [ 901.262999] ? devtmpfs_create_node+0x250/0x250 [ 901.267697] ? __device_link_free_srcu+0x120/0x120 [ 901.272643] ? refcount_dec_and_test_checked+0x1b/0x20 [ 901.277905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 901.283444] ? kobject_put+0x84/0xe0 [ 901.287157] ? __device_link_free_srcu+0x120/0x120 [ 901.292088] ? klist_children_put+0x4a/0x60 [ 901.296406] ? klist_put+0xdc/0x180 [ 901.300033] device_del+0x8b4/0xc40 [ 901.303654] ? __device_links_no_driver+0x250/0x250 [ 901.308664] ? mark_held_locks+0xa4/0xf0 [ 901.312738] ? _raw_spin_unlock_irq+0x28/0x90 [ 901.317227] ? __input_unregister_device+0x153/0x4a0 [ 901.322337] ? _raw_spin_unlock_irq+0x28/0x90 [ 901.326851] cdev_device_del+0x1a/0x80 [ 901.330771] evdev_disconnect+0x42/0xb0 [ 901.334737] __input_unregister_device+0x200/0x4a0 [ 901.339666] input_unregister_device+0xc5/0x110 [ 901.344379] uinput_destroy_device+0x1f4/0x250 [ 901.348975] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 901.354171] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 901.359529] ? kasan_check_read+0x11/0x20 [ 901.363692] ? __fget+0x367/0x540 [ 901.367156] ? ksys_dup3+0x3e0/0x3e0 [ 901.370866] ? fput+0x128/0x1a0 [ 901.374162] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 901.379614] uinput_compat_ioctl+0x70/0x90 [ 901.383856] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 901.389116] __ia32_compat_sys_ioctl+0x197/0x620 [ 901.393890] do_fast_syscall_32+0x281/0xc98 [ 901.398253] entry_SYSENTER_compat+0x70/0x7f [ 901.402685] RIP: 0023:0xf7faf869 [ 901.406051] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 901.424950] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 901.432649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 901.439922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.447187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 03:34:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xc8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 901.454447] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 901.461724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:57 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) [ 901.623407] input: syz0 as /devices/virtual/input/input80 [ 901.662891] FAULT_INJECTION: forcing a failure. [ 901.662891] name failslab, interval 1, probability 0, space 0, times 0 [ 901.675167] CPU: 0 PID: 16282 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 901.682103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.691456] Call Trace: [ 901.694071] dump_stack+0x172/0x1f0 [ 901.697737] should_fail.cold+0xa/0x15 [ 901.701689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 901.707323] ? ___might_sleep+0x163/0x280 [ 901.711492] __should_failslab+0x121/0x190 [ 901.715762] should_failslab+0x9/0x14 [ 901.719572] kmem_cache_alloc_trace+0x2d1/0x760 [ 901.724250] ? mutex_trylock+0x1e0/0x1e0 [ 901.728339] ? kasan_check_write+0x14/0x20 [ 901.732637] kobject_uevent_env+0x2fb/0x1030 [ 901.737053] ? wait_for_completion+0x440/0x440 [ 901.741647] kobject_uevent+0x20/0x26 [ 901.745446] device_del+0x758/0xc40 [ 901.749084] ? __device_links_no_driver+0x250/0x250 [ 901.754110] ? _raw_spin_unlock_irq+0x28/0x90 [ 901.758613] ? __input_unregister_device+0x153/0x4a0 [ 901.763764] ? _raw_spin_unlock_irq+0x28/0x90 [ 901.768284] cdev_device_del+0x1a/0x80 [ 901.772191] evdev_disconnect+0x42/0xb0 [ 901.776177] __input_unregister_device+0x200/0x4a0 [ 901.781121] input_unregister_device+0xc5/0x110 [ 901.785803] uinput_destroy_device+0x1f4/0x250 [ 901.790399] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 901.795605] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 901.800979] ? kasan_check_read+0x11/0x20 [ 901.805148] ? __fget+0x367/0x540 [ 901.808611] ? ksys_dup3+0x3e0/0x3e0 [ 901.812339] ? fput+0x128/0x1a0 [ 901.815869] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 901.821332] uinput_compat_ioctl+0x70/0x90 [ 901.825576] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 901.830777] __ia32_compat_sys_ioctl+0x197/0x620 [ 901.835563] do_fast_syscall_32+0x281/0xc98 [ 901.839911] entry_SYSENTER_compat+0x70/0x7f [ 901.844360] RIP: 0023:0xf7faf869 [ 901.847766] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 901.866677] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 03:34:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xe0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100260000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 901.874399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 901.881706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.889025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 901.896309] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 901.903569] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c8000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:58 executing program 4 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 902.088171] input: syz0 as /devices/virtual/input/input81 [ 902.105478] FAULT_INJECTION: forcing a failure. [ 902.105478] name failslab, interval 1, probability 0, space 0, times 0 [ 902.123723] CPU: 0 PID: 16305 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 902.130675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.140030] Call Trace: [ 902.142624] dump_stack+0x172/0x1f0 [ 902.146240] should_fail.cold+0xa/0x15 [ 902.150124] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 902.155227] ? ___might_sleep+0x163/0x280 [ 902.159364] __should_failslab+0x121/0x190 [ 902.163625] should_failslab+0x9/0x14 [ 902.167425] __kmalloc+0x2dc/0x740 [ 902.170968] ? kobject_uevent_env+0x2fb/0x1030 [ 902.175576] ? rcu_read_lock_sched_held+0x110/0x130 [ 902.180619] ? kobject_get_path+0xc4/0x1b0 [ 902.184843] kobject_get_path+0xc4/0x1b0 [ 902.189881] kobject_uevent_env+0x31f/0x1030 [ 902.194291] ? wait_for_completion+0x440/0x440 [ 902.198871] kobject_uevent+0x20/0x26 [ 902.202671] device_del+0x758/0xc40 [ 902.206317] ? __device_links_no_driver+0x250/0x250 [ 902.211325] ? _raw_spin_unlock_irq+0x28/0x90 [ 902.215813] ? __input_unregister_device+0x153/0x4a0 [ 902.220903] ? _raw_spin_unlock_irq+0x28/0x90 [ 902.225389] cdev_device_del+0x1a/0x80 [ 902.229266] evdev_disconnect+0x42/0xb0 [ 902.233257] __input_unregister_device+0x200/0x4a0 [ 902.238204] input_unregister_device+0xc5/0x110 [ 902.242873] uinput_destroy_device+0x1f4/0x250 [ 902.247448] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 902.252627] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 902.257981] ? kasan_check_read+0x11/0x20 [ 902.262130] ? __fget+0x367/0x540 [ 902.265597] ? ksys_dup3+0x3e0/0x3e0 [ 902.269312] ? fput+0x128/0x1a0 [ 902.272586] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 902.278033] uinput_compat_ioctl+0x70/0x90 [ 902.282306] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 902.287514] __ia32_compat_sys_ioctl+0x197/0x620 [ 902.292261] do_fast_syscall_32+0x281/0xc98 [ 902.296589] entry_SYSENTER_compat+0x70/0x7f [ 902.300993] RIP: 0023:0xf7faf869 [ 902.304345] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 902.323267] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 902.330991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 03:34:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xd0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 902.338253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 902.345537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.352794] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 902.360047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:58 executing program 4 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:34:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) [ 902.544104] input: syz0 as /devices/virtual/input/input82 [ 902.569674] FAULT_INJECTION: forcing a failure. [ 902.569674] name failslab, interval 1, probability 0, space 0, times 0 [ 902.589603] CPU: 1 PID: 16315 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 902.596579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.605950] Call Trace: [ 902.608565] dump_stack+0x172/0x1f0 [ 902.612219] should_fail.cold+0xa/0x15 [ 902.616132] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 902.621266] ? ___might_sleep+0x163/0x280 [ 902.625449] __should_failslab+0x121/0x190 [ 902.629703] should_failslab+0x9/0x14 [ 902.633526] __kmalloc_track_caller+0x2d8/0x740 [ 902.638217] ? pointer+0x910/0x910 [ 902.641802] ? kasprintf+0xbb/0xf0 [ 902.645366] kvasprintf+0xc8/0x170 [ 902.648949] ? bust_spinlocks+0xe0/0xe0 [ 902.652955] ? pointer+0x910/0x910 [ 902.656516] kasprintf+0xbb/0xf0 [ 902.659896] ? kvasprintf_const+0x190/0x190 [ 902.664243] ? cleanup_uevent_env+0x50/0x50 [ 902.668604] ? input_default_getkeycode+0x520/0x520 [ 902.673635] input_devnode+0x4c/0x90 [ 902.677375] device_get_devnode+0x175/0x2e0 [ 902.681717] dev_uevent+0x3e8/0x580 [ 902.685362] ? device_get_devnode+0x2e0/0x2e0 [ 902.689883] ? kobject_uevent_env+0x2fb/0x1030 [ 902.694487] ? rcu_read_lock_sched_held+0x110/0x130 [ 902.699535] ? device_get_devnode+0x2e0/0x2e0 [ 902.704074] kobject_uevent_env+0x487/0x1030 [ 902.708729] ? wait_for_completion+0x440/0x440 [ 902.713336] kobject_uevent+0x20/0x26 [ 902.717155] device_del+0x758/0xc40 [ 902.720823] ? __device_links_no_driver+0x250/0x250 [ 902.725880] ? _raw_spin_unlock_irq+0x28/0x90 [ 902.730391] ? __input_unregister_device+0x153/0x4a0 [ 902.735504] ? _raw_spin_unlock_irq+0x28/0x90 [ 902.740028] cdev_device_del+0x1a/0x80 [ 902.743950] evdev_disconnect+0x42/0xb0 [ 902.747953] __input_unregister_device+0x200/0x4a0 [ 902.752896] input_unregister_device+0xc5/0x110 [ 902.757575] uinput_destroy_device+0x1f4/0x250 [ 902.762209] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 902.767416] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 902.772805] ? kasan_check_read+0x11/0x20 [ 902.772863] ? __fget+0x367/0x540 [ 902.772884] ? ksys_dup3+0x3e0/0x3e0 [ 902.772902] ? fput+0x128/0x1a0 [ 902.784212] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 902.792925] uinput_compat_ioctl+0x70/0x90 [ 902.797181] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 902.802389] __ia32_compat_sys_ioctl+0x197/0x620 [ 902.807167] do_fast_syscall_32+0x281/0xc98 [ 902.811507] entry_SYSENTER_compat+0x70/0x7f [ 902.816401] RIP: 0023:0xf7faf869 [ 902.819813] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 03:34:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001c8b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xe8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:34:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100260b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 902.838754] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 902.846488] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 902.853760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 902.853770] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.853779] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 902.853795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:59 executing program 4 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 903.056143] input: syz0 as /devices/virtual/input/input83 [ 903.073734] FAULT_INJECTION: forcing a failure. [ 903.073734] name failslab, interval 1, probability 0, space 0, times 0 [ 903.098740] CPU: 1 PID: 16340 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 903.105698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.115071] Call Trace: [ 903.117687] dump_stack+0x172/0x1f0 [ 903.121354] should_fail.cold+0xa/0x15 [ 903.125286] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 903.130440] ? ___might_sleep+0x163/0x280 [ 903.134617] __should_failslab+0x121/0x190 [ 903.138883] should_failslab+0x9/0x14 [ 903.142730] __kmalloc_track_caller+0x2d8/0x740 [ 903.147438] ? pointer+0x910/0x910 [ 903.151008] ? kasprintf+0xbb/0xf0 [ 903.154571] kvasprintf+0xc8/0x170 [ 903.158154] ? bust_spinlocks+0xe0/0xe0 [ 903.162157] ? pointer+0x910/0x910 [ 903.165757] kasprintf+0xbb/0xf0 [ 903.169141] ? kvasprintf_const+0x190/0x190 [ 903.173493] ? cleanup_uevent_env+0x50/0x50 [ 903.177874] ? input_default_getkeycode+0x520/0x520 [ 903.182905] input_devnode+0x4c/0x90 [ 903.186640] device_get_devnode+0x175/0x2e0 [ 903.190980] dev_uevent+0x3e8/0x580 [ 903.194628] ? device_get_devnode+0x2e0/0x2e0 [ 903.199157] ? kobject_uevent_env+0x2fb/0x1030 [ 903.203739] ? rcu_read_lock_sched_held+0x110/0x130 [ 903.208799] ? device_get_devnode+0x2e0/0x2e0 [ 903.213332] kobject_uevent_env+0x487/0x1030 [ 903.217771] ? wait_for_completion+0x440/0x440 [ 903.222366] kobject_uevent+0x20/0x26 [ 903.226155] device_del+0x758/0xc40 [ 903.229820] ? __device_links_no_driver+0x250/0x250 [ 903.234841] ? _raw_spin_unlock_irq+0x28/0x90 [ 903.239327] ? __input_unregister_device+0x153/0x4a0 [ 903.244430] ? _raw_spin_unlock_irq+0x28/0x90 [ 903.248975] cdev_device_del+0x1a/0x80 [ 903.252866] evdev_disconnect+0x42/0xb0 [ 903.256830] __input_unregister_device+0x200/0x4a0 [ 903.261819] input_unregister_device+0xc5/0x110 [ 903.266500] uinput_destroy_device+0x1f4/0x250 [ 903.271072] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 903.276265] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 903.281647] ? kasan_check_read+0x11/0x20 [ 903.285816] ? __fget+0x367/0x540 [ 903.289259] ? ksys_dup3+0x3e0/0x3e0 [ 903.292967] ? fput+0x128/0x1a0 [ 903.296256] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 903.301730] uinput_compat_ioctl+0x70/0x90 [ 903.305963] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 903.311139] __ia32_compat_sys_ioctl+0x197/0x620 [ 903.315942] do_fast_syscall_32+0x281/0xc98 [ 903.320305] entry_SYSENTER_compat+0x70/0x7f [ 903.324722] RIP: 0023:0xf7faf869 [ 903.328114] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 903.347041] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 03:34:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xd8000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 903.354752] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 903.362026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.369295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 903.376568] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 903.383830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:59 executing program 4 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 903.513238] input: syz0 as /devices/virtual/input/input84 [ 903.529005] FAULT_INJECTION: forcing a failure. [ 903.529005] name failslab, interval 1, probability 0, space 0, times 0 [ 903.548295] CPU: 1 PID: 16349 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 903.555296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.564646] Call Trace: [ 903.567247] dump_stack+0x172/0x1f0 [ 903.570916] should_fail.cold+0xa/0x15 [ 903.574830] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 903.579954] ? ___might_sleep+0x163/0x280 [ 903.584114] __should_failslab+0x121/0x190 [ 903.588369] should_failslab+0x9/0x14 [ 903.592173] kmem_cache_alloc_node+0x264/0x710 [ 903.596785] ? find_held_lock+0x35/0x130 [ 903.600888] __alloc_skb+0xd5/0x5e0 [ 903.604534] ? skb_trim+0x190/0x190 [ 903.608164] ? kasan_check_read+0x11/0x20 [ 903.612336] alloc_uevent_skb+0x83/0x1e2 [ 903.616390] kobject_uevent_env+0xa63/0x1030 [ 903.620810] ? wait_for_completion+0x440/0x440 [ 903.625389] kobject_uevent+0x20/0x26 [ 903.629250] device_del+0x758/0xc40 [ 903.632909] ? __device_links_no_driver+0x250/0x250 [ 903.637930] ? _raw_spin_unlock_irq+0x28/0x90 [ 903.642412] ? __input_unregister_device+0x153/0x4a0 [ 903.647527] ? _raw_spin_unlock_irq+0x28/0x90 [ 903.652042] cdev_device_del+0x1a/0x80 [ 903.655930] evdev_disconnect+0x42/0xb0 [ 903.659904] __input_unregister_device+0x200/0x4a0 [ 903.664972] input_unregister_device+0xc5/0x110 [ 903.669644] uinput_destroy_device+0x1f4/0x250 [ 903.674265] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 903.679470] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 903.684834] ? kasan_check_read+0x11/0x20 [ 903.688985] ? __fget+0x367/0x540 [ 903.692451] ? ksys_dup3+0x3e0/0x3e0 [ 903.696202] ? fput+0x128/0x1a0 [ 903.699493] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 903.704944] uinput_compat_ioctl+0x70/0x90 [ 903.709193] ? __sanitizer_cov_trace_switch+0x49/0x80 03:34:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xf0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) [ 903.714388] __ia32_compat_sys_ioctl+0x197/0x620 [ 903.714476] do_fast_syscall_32+0x281/0xc98 [ 903.714495] entry_SYSENTER_compat+0x70/0x7f [ 903.714509] RIP: 0023:0xf7faf869 [ 903.723602] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 903.750250] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 03:34:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d0000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 903.757997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 903.765289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.772568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 903.779843] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 903.787117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:34:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:34:59 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100268000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:34:59 executing program 4 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 903.967850] input: syz0 as /devices/virtual/input/input85 [ 903.999881] FAULT_INJECTION: forcing a failure. [ 903.999881] name failslab, interval 1, probability 0, space 0, times 0 [ 904.037439] CPU: 0 PID: 16371 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 904.044393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.053756] Call Trace: [ 904.056361] dump_stack+0x172/0x1f0 [ 904.059995] should_fail.cold+0xa/0x15 [ 904.063887] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 904.069002] ? ___might_sleep+0x163/0x280 [ 904.073172] __should_failslab+0x121/0x190 [ 904.077416] should_failslab+0x9/0x14 [ 904.081214] kmem_cache_alloc+0x2b2/0x6f0 [ 904.085355] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 904.090456] ? lock_downgrade+0x880/0x880 [ 904.094619] skb_clone+0x150/0x3b0 [ 904.098319] netlink_broadcast_filtered+0x870/0xb20 [ 904.103367] netlink_broadcast+0x3a/0x50 [ 904.107437] kobject_uevent_env+0xa94/0x1030 [ 904.111840] ? wait_for_completion+0x440/0x440 [ 904.116443] kobject_uevent+0x20/0x26 [ 904.120257] device_del+0x758/0xc40 [ 904.123912] ? __device_links_no_driver+0x250/0x250 [ 904.128944] ? _raw_spin_unlock_irq+0x28/0x90 [ 904.133430] ? __input_unregister_device+0x153/0x4a0 [ 904.138539] ? _raw_spin_unlock_irq+0x28/0x90 [ 904.143051] cdev_device_del+0x1a/0x80 [ 904.146953] evdev_disconnect+0x42/0xb0 [ 904.150947] __input_unregister_device+0x200/0x4a0 [ 904.155907] input_unregister_device+0xc5/0x110 [ 904.160575] uinput_destroy_device+0x1f4/0x250 [ 904.165175] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 904.170377] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 904.175747] ? kasan_check_read+0x11/0x20 [ 904.179911] ? __fget+0x367/0x540 [ 904.183376] ? ksys_dup3+0x3e0/0x3e0 [ 904.187092] ? fput+0x128/0x1a0 [ 904.190382] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 904.195843] uinput_compat_ioctl+0x70/0x90 [ 904.200075] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 904.205269] __ia32_compat_sys_ioctl+0x197/0x620 [ 904.210091] do_fast_syscall_32+0x281/0xc98 [ 904.214414] entry_SYSENTER_compat+0x70/0x7f [ 904.218827] RIP: 0023:0xf7faf869 03:35:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xe0000, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) [ 904.222189] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 904.241070] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 904.248782] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 904.256058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.263325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 904.270597] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 904.277878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:35:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) 03:35:00 executing program 4 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{}, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 904.455435] input: syz0 as /devices/virtual/input/input86 [ 904.514907] FAULT_INJECTION: forcing a failure. [ 904.514907] name failslab, interval 1, probability 0, space 0, times 0 [ 904.544719] CPU: 1 PID: 16382 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 904.551680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.561029] Call Trace: [ 904.563640] dump_stack+0x172/0x1f0 [ 904.567304] should_fail.cold+0xa/0x15 [ 904.571211] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 904.576380] ? ___might_sleep+0x163/0x280 [ 904.580533] __should_failslab+0x121/0x190 [ 904.584783] should_failslab+0x9/0x14 [ 904.588604] kmem_cache_alloc_trace+0x2d1/0x760 [ 904.593270] ? kasan_check_write+0x14/0x20 [ 904.597526] kobject_uevent_env+0x2fb/0x1030 [ 904.601944] ? wait_for_completion+0x440/0x440 [ 904.606548] kobject_uevent+0x20/0x26 [ 904.610354] device_del+0x758/0xc40 [ 904.613991] ? __device_links_no_driver+0x250/0x250 [ 904.619022] ? trace_hardirqs_on+0x67/0x230 [ 904.623353] __input_unregister_device+0x3a4/0x4a0 [ 904.628290] input_unregister_device+0xc5/0x110 [ 904.632959] uinput_destroy_device+0x1f4/0x250 [ 904.637578] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 904.642799] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 904.648170] ? kasan_check_read+0x11/0x20 [ 904.652331] ? __fget+0x367/0x540 [ 904.655803] ? ksys_dup3+0x3e0/0x3e0 [ 904.659542] ? fput+0x128/0x1a0 [ 904.662862] ? uinput_ioctl_handler.isra.0+0x1c60/0x1c60 [ 904.668392] uinput_compat_ioctl+0x70/0x90 [ 904.672634] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 904.677838] __ia32_compat_sys_ioctl+0x197/0x620 [ 904.682617] do_fast_syscall_32+0x281/0xc98 [ 904.686956] entry_SYSENTER_compat+0x70/0x7f [ 904.691397] RIP: 0023:0xf7faf869 [ 904.694772] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 904.713931] RSP: 002b:00000000f5dab0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 904.721653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 904.728921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.736211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 904.743495] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 904.750762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 03:35:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x100268b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:35:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0xffffff1f, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x0, 0x1, 0x81, 0x304}) 03:35:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1001d0b20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) 03:35:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@security={'security\x00', 0xe, 0x4, 0x370, 0x0, 0x0, 0x114, 0x220, 0x220, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x2dc, 0x4, &(0x7f00000002c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@ah={0x2c, 'ah\x00', 0x0, {0xbba, 0x6, 0x1}}, @common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x4, 0x7, 0x1, 0x1}}]}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffff00, 'ipddp0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x21, 0x2}, 0x0, 0xe8, 0x10c, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0x9, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x1e, 0x9, 0x7}}}, {{@uncond, 0x0, 0x98, 0xbc}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x8001, 0x10000}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3cc) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc={0x27}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000000)=""/20, 0x828, 0x800500}, 0x1500) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000040)={0x4, 0x1, 0x81, 0x304}) [ 904.934902] ================================================================== [ 904.942624] BUG: KASAN: use-after-free in string+0x208/0x230 [ 904.948435] Read of size 1 at addr ffff888085c8b3c0 by task syz-executor.4/16381 [ 904.955979] [ 904.957622] CPU: 0 PID: 16381 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 904.964554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.973913] Call Trace: [ 904.976509] dump_stack+0x172/0x1f0 [ 904.980149] ? string+0x208/0x230 [ 904.983618] print_address_description.cold+0x7c/0x20d [ 904.988900] ? string+0x208/0x230 [ 904.992364] ? string+0x208/0x230 [ 904.995865] kasan_report.cold+0x1b/0x40 [ 904.999934] ? string+0x208/0x230 [ 905.003403] __asan_report_load1_noabort+0x14/0x20 [ 905.008344] string+0x208/0x230 [ 905.011633] ? widen_string+0x2e0/0x2e0 [ 905.015617] ? find_held_lock+0x35/0x130 [ 905.019695] vsnprintf+0x980/0x19b0 [ 905.023335] ? pointer+0x910/0x910 [ 905.026895] ? string+0x1cc/0x230 [ 905.030381] add_uevent_var+0x14d/0x310 [ 905.034366] ? cleanup_uevent_env+0x50/0x50 [ 905.038708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 905.044262] ? input_dev_uevent+0x110/0x890 [ 905.048612] input_dev_uevent+0x163/0x890 [ 905.052768] ? input_add_uevent_bm_var+0x150/0x150 [ 905.057707] dev_uevent+0x312/0x580 [ 905.061357] ? device_get_devnode+0x2e0/0x2e0 [ 905.065886] ? kobject_uevent_env+0x2fb/0x1030 [ 905.070475] ? rcu_read_lock_sched_held+0x110/0x130 [ 905.075533] ? kobject_uevent_env+0x37d/0x1030 [ 905.080124] ? device_get_devnode+0x2e0/0x2e0 [ 905.084631] kobject_uevent_env+0x487/0x1030 [ 905.089061] ? release_nodes+0x548/0x9c0 [ 905.093136] kobject_uevent+0x20/0x26 [ 905.096945] kobject_put.cold+0x177/0x2ec [ 905.101125] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 905.106416] put_device+0x20/0x30 [ 905.109877] evdev_free+0x51/0x70 [ 905.113341] device_release+0x7d/0x210 [ 905.117251] kobject_put.cold+0x28f/0x2ec [ 905.121426] cdev_default_release+0x41/0x50 [ 905.125766] kobject_put.cold+0x28f/0x2ec [ 905.129921] cdev_put.part.0+0x39/0x50 [ 905.133819] cdev_put+0x20/0x30 [ 905.137108] __fput+0x6d9/0x8d0 [ 905.140403] ____fput+0x16/0x20 [ 905.143704] task_work_run+0x14a/0x1c0 [ 905.147609] exit_to_usermode_loop+0x273/0x2c0 [ 905.152204] do_fast_syscall_32+0xa9d/0xc98 [ 905.156572] entry_SYSENTER_compat+0x70/0x7f [ 905.160982] RIP: 0023:0xf7faf869 [ 905.164392] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 905.183312] RSP: 002b:000000000845fd7c EFLAGS: 00000216 ORIG_RAX: 0000000000000006 [ 905.191047] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 905.198342] RDX: 0000000000000005 RSI: 0000000000000004 RDI: 0000000000000000 [ 905.205614] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 905.212883] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 905.220154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 905.227455] [ 905.229084] Allocated by task 16382: [ 905.232814] save_stack+0x45/0xd0 [ 905.236282] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 905.241232] kasan_kmalloc+0x9/0x10 [ 905.244907] __kmalloc_track_caller+0x158/0x740 [ 905.249591] kstrndup+0x5f/0xf0 [ 905.252874] uinput_dev_setup+0x1d4/0x310 [ 905.257027] uinput_ioctl_handler.isra.0+0x493/0x1c60 [ 905.262221] uinput_compat_ioctl+0x70/0x90 [ 905.266464] __ia32_compat_sys_ioctl+0x197/0x620 [ 905.271229] do_fast_syscall_32+0x281/0xc98 [ 905.275607] entry_SYSENTER_compat+0x70/0x7f [ 905.280009] [ 905.281635] Freed by task 16382: [ 905.285001] save_stack+0x45/0xd0 [ 905.288468] __kasan_slab_free+0x102/0x150 [ 905.292720] kasan_slab_free+0xe/0x10 [ 905.296537] kfree+0xcf/0x230 [ 905.299658] uinput_destroy_device+0xf8/0x250 [ 905.304155] uinput_ioctl_handler.isra.0+0x15f/0x1c60 [ 905.309351] uinput_compat_ioctl+0x70/0x90 [ 905.313595] __ia32_compat_sys_ioctl+0x197/0x620 [ 905.318366] do_fast_syscall_32+0x281/0xc98 [ 905.322689] entry_SYSENTER_compat+0x70/0x7f [ 905.327090] [ 905.328722] The buggy address belongs to the object at ffff888085c8b3c0 [ 905.328722] which belongs to the cache kmalloc-32 of size 32 [ 905.341211] The buggy address is located 0 bytes inside of [ 905.341211] 32-byte region [ffff888085c8b3c0, ffff888085c8b3e0) [ 905.352823] The buggy address belongs to the page: [ 905.357757] page:ffffea00021722c0 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff888085c8bfc1 [ 905.367214] flags: 0x1fffc0000000200(slab) [ 905.371508] raw: 01fffc0000000200 ffffea00029f5fc8 ffffea000296ddc8 ffff88812c3f01c0 [ 905.379399] raw: ffff888085c8bfc1 ffff888085c8b000 000000010000003f 0000000000000000 [ 905.387283] page dumped because: kasan: bad access detected [ 905.392992] [ 905.394611] Memory state around the buggy address: [ 905.399534] ffff888085c8b280: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 905.406900] ffff888085c8b300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 905.414257] >ffff888085c8b380: 00 06 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 905.421633] ^ [ 905.427083] ffff888085c8b400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 905.434436] ffff888085c8b480: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 905.441802] ================================================================== [ 905.449178] Disabling lock debugging due to kernel taint [ 905.474562] Kernel panic - not syncing: panic_on_warn set ... [ 905.479779] kobject: 'loop1' (000000002609328d): kobject_uevent_env [ 905.480464] CPU: 0 PID: 16381 Comm: syz-executor.4 Tainted: G B 5.0.0+ #11 [ 905.495147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.496940] kobject: 'loop1' (000000002609328d): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 905.504483] Call Trace: [ 905.504501] dump_stack+0x172/0x1f0 [ 905.504567] panic+0x2cb/0x65c [ 905.504582] ? __warn_printk+0xf3/0xf3 [ 905.527264] ? string+0x208/0x230 [ 905.530767] ? preempt_schedule+0x4b/0x60 [ 905.534953] ? ___preempt_schedule+0x16/0x18 [ 905.539367] ? trace_hardirqs_on+0x5e/0x230 [ 905.543690] ? string+0x208/0x230 [ 905.547141] end_report+0x47/0x4f [ 905.550597] ? string+0x208/0x230 [ 905.554084] kasan_report.cold+0xe/0x40 [ 905.558076] ? string+0x208/0x230 [ 905.561537] __asan_report_load1_noabort+0x14/0x20 [ 905.566488] string+0x208/0x230 [ 905.569787] ? widen_string+0x2e0/0x2e0 [ 905.573770] ? find_held_lock+0x35/0x130 [ 905.577835] vsnprintf+0x980/0x19b0 [ 905.581465] ? pointer+0x910/0x910 [ 905.585006] ? string+0x1cc/0x230 [ 905.588469] add_uevent_var+0x14d/0x310 [ 905.592462] ? cleanup_uevent_env+0x50/0x50 [ 905.596788] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 905.602335] ? input_dev_uevent+0x110/0x890 [ 905.606658] input_dev_uevent+0x163/0x890 [ 905.610807] ? input_add_uevent_bm_var+0x150/0x150 [ 905.615739] dev_uevent+0x312/0x580 [ 905.619379] ? device_get_devnode+0x2e0/0x2e0 [ 905.623886] ? kobject_uevent_env+0x2fb/0x1030 [ 905.627931] kobject: 'loop3' (00000000629c7998): kobject_uevent_env [ 905.628470] ? rcu_read_lock_sched_held+0x110/0x130 [ 905.639866] ? kobject_uevent_env+0x37d/0x1030 [ 905.640334] kobject: 'loop3' (00000000629c7998): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 905.644447] ? device_get_devnode+0x2e0/0x2e0 [ 905.644464] kobject_uevent_env+0x487/0x1030 [ 905.644500] ? release_nodes+0x548/0x9c0 [ 905.644518] kobject_uevent+0x20/0x26 [ 905.644533] kobject_put.cold+0x177/0x2ec [ 905.644551] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 905.683964] put_device+0x20/0x30 [ 905.687426] evdev_free+0x51/0x70 [ 905.690887] device_release+0x7d/0x210 [ 905.694775] kobject_put.cold+0x28f/0x2ec [ 905.698941] cdev_default_release+0x41/0x50 [ 905.703271] kobject_put.cold+0x28f/0x2ec [ 905.707441] cdev_put.part.0+0x39/0x50 [ 905.711332] cdev_put+0x20/0x30 [ 905.714615] __fput+0x6d9/0x8d0 [ 905.717897] ____fput+0x16/0x20 [ 905.721177] task_work_run+0x14a/0x1c0 [ 905.725070] exit_to_usermode_loop+0x273/0x2c0 [ 905.729668] do_fast_syscall_32+0xa9d/0xc98 [ 905.733612] kobject: 'loop5' (00000000b2dec556): kobject_uevent_env [ 905.734004] entry_SYSENTER_compat+0x70/0x7f [ 905.744142] kobject: 'loop5' (00000000b2dec556): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 905.744784] RIP: 0023:0xf7faf869 [ 905.744798] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 905.744804] RSP: 002b:000000000845fd7c EFLAGS: 00000216 ORIG_RAX: 0000000000000006 [ 905.744815] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 905.744826] RDX: 0000000000000005 RSI: 0000000000000004 RDI: 0000000000000000 [ 905.798761] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 905.806038] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 905.813325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 905.821570] Kernel Offset: disabled [ 905.825194] Rebooting in 86400 seconds..